Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-2961 | The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the… | 7.3 | 88% | ||
| CVE-2024-34102 | XXE vulnerability enabling RCE in Adobe Commerce and Magento Open Source | 9.8 | 100% | KEVPoC | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | jgueurystatic.xyz | h accesses a dynamic skimmer code from a WebSocket at wss://jgueurystatic[.]xyz:8101 Group Ondatry , which uses custom JavaScript loader |
| domain | rextension.net | ent information to domains that include a 2-character URI ("rextension[.]net/za/") Group Belki , which uses CosmicSting with CNEXT to |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Oct 02, 2024 Vulnerability / Data Breach Cybersecurity researchers have disclosed that 5% of all Adobe Commerce and Magento stores have been hacked by malicious actors by exploiting a security vulnerability dubbed CosmicSting. Tracked as CVE-2024-34102 (CVSS score: 9.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.