Malwarehigh
New Capoae Malware Infiltrates WordPress Sites and Installs Backdoored Plugin
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-20062 | Unauthenticated Remote Code Execution in ThinkPHP-based noneCms 1.3 | 9.8 | 100% | KEVPoC ×2 | KEV |
| CVE-2019-1003029 | Sandbox Bypass Enables RCE in Jenkins Script Security Plugin 1.53 and Earlier | 9.9 | 74% | KEV | KEV |
| CVE-2019-1003030 | Sandbox Bypass Enables RCE in Jenkins Pipeline: Groovy Plugin | 9.9 | 97% | KEVPoC | KEV |
| CVE-2020-14882 | Remote Code Execution in Oracle WebLogic Server | 9.8 | 100% | KEVPoC ×3 | KEV |
From the original article
2 min read at thehackernews.com
A recently discovered wave of malware attacks has been spotted using a variety of tactics to enslave susceptible machines with easy-to-guess administrative credentials to co-opt them into a network with the goal of illegally mining cryptocurrency. "The malware's primary tactic is to spread by taking advantage of vulnerable systems and weak administrative credentials.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.