Vulnerabilitymedium
Anti-DDoS Firm Heaped Attacks on Brazilian ISPs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-1389 | Command Injection in TP-Link Archer AX21 Router Allows Remote Code Execution | 8.8 | 100% | KEVPoC ×2 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | hikylover.st | the exposed Python attack scripts included DNS lookups for hikylover[.]st , and c.loyaltyservices[.]lol , both domains that have be |
| domain | loyaltyservices.lol | ack scripts included DNS lookups for hikylover[.]st , and c.loyaltyservices[.]lol , both domains that have been flagged in the past year as |
From the original article
5 min read at krebsonsecurity.comA Brazilian tech firm that specializes in protecting networks from distributed denial-of-service (DDoS) attacks has been enabling a botnet responsible for an extended campaign of massive DDoS attacks against other network operators in Brazil, KrebsOnSecurity has learned.
krebsonsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.