Threat actorcritical

Hacked Drupal sites involved in mining campaigns, RATs distributions, scams

Security Affairsby @securityaffairsMay 21, 2018 · 12:00 UTC (May 21, 2018)3 min read3

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-7600 CVE-2018-7602

Tags: cve-2018-7600 cve-2018-7602 threat-actor

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-7600	Unauthenticated Remote Code Execution in Drupal Core (Drupalgeddon 2)	9.8	100%	KEVRansomwarePoC ×4	Mar 29, 2018 KEV Nov 3, 2021
CVE-2018-7602	Drupal Core Remote Code Execution Vulnerability	9.8	99%	KEVRansomwarePoC ×2	Jul 19, 2018 KEV Apr 13, 2022

From the original article

3 min read at securityaffairs.com

Crooks are exploiting known vulnerabilities in the popular Drupal CMS such as Drupalgeddon2 and Drupalgeddon3 to deliver cryptocurrency miners, remote administration tools (RATs) and tech support scams. Security experts at Malwarebytes reported that compromised Drupal websites are used to deliver cryptocurrency miners, remote administration tools (RATs) and tech support scams.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.