Vulnerabilityhigh
CrystalRay operations have scaled 10x to over 1,500 victims
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-18394 | A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET… | 9.8 | 32% | ||
| CVE-2021-3129 | Unauthenticated RCE in Laravel Ignition error-page package (facade/ignition) | 9.8 | 100% | KEVRansomwarePoC ×3 | KEV |
| CVE-2022-44877 | Remote OS Command Injection in CWP Control Web Panel | 9.8 | 100% | KEVPoC ×6 | KEV |
From the original article
2 min read at securityaffairs.com
A threat actor known as CrystalRay targeted 1,500 victims since February using tools like SSH-Snake and various open-source utilities. The Sysdig Threat Research Team (TRT) first spotted the threat actor CrystalRay on February 2024 and observed it using the SSH-Snake open-source software penetration testing tool. The experts collected new evidence that revealed that the threat actor expanded its operations.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.