Threat actorhigh

Fox Kitten Campaign - Iranian hackers exploit 1

Security Affairsby @securityaffairsFeb 17, 2020 · 06:07 UTC (Feb 17, 2020)3 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2019-11510 CVE-2018-13379 CVE-2019-1579 CVE-2019-19781

Tags: cve-2019-11510 cve-2018-13379 cve-2019-1579 cve-2019-19781 threat-actor

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2019-11510	Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN	10.0	100%	KEVRansomwarePoC ×2	May 8, 2019 KEV Nov 3, 2021
CVE-2019-1579	Format String RCE in Palo Alto Networks PAN-OS GlobalProtect Portal/Gateway	8.1	44%	KEVRansomwarePoC	Jul 19, 2019 KEV Jan 10, 2022
CVE-2019-19781	Unauthenticated path traversal RCE in Citrix ADC, Gateway, and SD-WAN WANOP	9.8	100%	KEVRansomware	Dec 27, 2019 KEV Nov 3, 2021

From the original article

3 min read at securityaffairs.com

Iranian hackers have been hacking VPN servers to plant backdoors in companies around the world Iran-linked attackers targeted Pulse Secure, Fortinet, Palo Alto Networks, and Citrix VPNs to hack into large companies as part of the Fox Kitten Campaign.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.