Malwaremedium
Modular Cryptojacking malware uses worm abilities to spread
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-3120 | Remote Code Execution via Dynamic Scripting in Elasticsearch (CVE-2014-3120) | — | 89% | KEV | — KEV |
| CVE-2015-1427 | Sandbox Bypass RCE in Elasticsearch Groovy Scripting Engine | — | 100% | KEV | — KEV |
| CVE-2017-10271 | Unauthenticated Remote Code Execution in Oracle WebLogic Server | 7.5 | 100% | KEVRansomwarePoC ×3 | KEV |
| CVE-2018-1273 | Unauthenticated RCE in VMware Tanzu Spring Data Commons | 9.8 | 97% | KEVRansomware | KEV |
From the original article
1 min read at securityaffairs.com
Security experts at 360 Total Security have discovered a new modular cryptocurrency malware that implements worm capabilities to spread. Security experts at 360 Total Security have discovered a new modular cryptocurrency malware that implements worm capabilities by leveraging known vulnerabilities in servers running ElasticSearch, Hadoop, Redis, Spring, Weblogic, ThinkPHP, and SqlServer.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.