Vulnerabilitymedium
The Old and New: Current Trends in Web
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-6332 | Remote Code Execution via Array Bounds Flaw in Microsoft Windows OLE Automation | — | 95% | KEV | — KEV |
| CVE-2015-5122 | Use-After-Free RCE in Adobe Flash Player AS3 DisplayObject | — | 87% | KEV | — KEV |
| CVE-2016-0189 | Memory Corruption RCE in Microsoft IE Scripting Engines (JScript/VBScript) | 7.5 | 94% | KEVRansomwarePoC | KEV |
| CVE-2016-6332 | MediaWiki before 1.23.15, 1.26.x before 1.26.4, and 1.27.x before 1.27.1, when $wgBlockDisablesLogin is true, might allow remote attackers to obtain sensitive… | 7.5 | 2% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | 24vipcpsins.online | e apple-icloud-idcos[.]top ggga[.]xyz www.apple-ifena[.]com 24vipcpsins[.]online www.apple-lnciphone[.]com www.icloud[.]com.iosny[.]cn www |
| domain | aducrea.online | m-ioseat[.]cn casinosmart[.]online appleid-iphone[.]com www.aducrea[.]online apple-icloud-idcos[.]top ggga[.]xyz www.apple-ifena[.]com |
| domain | adultacream.online | itunes[.]vip bugi1man[.]info www.apple-ifngiphone[.]com www.adultacream[.]online www.applefind-iphone[.]com www.icloud-iphoneifed[.]com ww |
| domain | adultcre.online | m in time. IOCs Malicious domains: www.primoprime[.]com www.adultcre[.]online apple-id[.]vip iz-icloud[.]cn icloud-appd[.]cn www.icloud |
| domain | app-id-itunes.vip | vkingate[.]info icloud[.]iosny[.]cn www.appleid-ifane[.]com app-id-itunes[.]vip bugi1man[.]info www.apple-ifngiphone[.]com www.adultacrea |
| domain | appid.pxret-ios.cn | www.applefind-iphone[.]com www.icloud-iphoneifed[.]com www.appid[.]pxret-ios[.]cn www.iphone[.]firds[.]cn com-iosvnt[.]cn appie-pd[.]top |
| domain | appie-pd.top | id[.]pxret-ios[.]cn www.iphone[.]firds[.]cn com-iosvnt[.]cn appie-pd[.]top prestige-rent[.]eu netrsy[.]com icloud[.]com-iosrnx[.]cn |
| domain | appie-td.top | nx[.]cn www.apple-ifoniphone[.]com www.apple-icloud-ac[.]cn appie-td[.]top tvbsports[.]nl icloud-id[.]co pixelko[.]info |
| domain | appie-yd.top | op prestige-rent[.]eu netrsy[.]com icloud[.]com-iosrnx[.]cn appie-yd[.]top www.icloud[.]com-ioseat[.]cn casinosmart[.]online appleid |
| domain | applefind-iphone.com | nfo www.apple-ifngiphone[.]com www.adultacream[.]online www.applefind-iphone[.]com www.icloud-iphoneifed[.]com www.appid[.]pxret-ios[.]cn ww |
| domain | apple-icloud-ac.cn | .]firds[.]cn com-iosrnx[.]cn www.apple-ifoniphone[.]com www.apple-icloud-ac[.]cn appie-td[.]top tvbsports[.]nl icloud-id[.]co pixelko[.]in |
| domain | apple-icloud-idcos.top | inosmart[.]online appleid-iphone[.]com www.aducrea[.]online apple-icloud-idcos[.]top ggga[.]xyz www.apple-ifena[.]com 24vipcpsins[.]online www |
| domain | apple-icloud-iphone.cn | om www.icloud[.]com.iosny[.]cn www.icloud[.]com-ioslga[.]cn apple-icloud-iphone[.]cn недостаточно[.]рф icloud-mybook[.]com[.]cn www.apple[.]co |
| domain | appleid-ifane.com | [.]com iosny[.]cn gavkingate[.]info icloud[.]iosny[.]cn www.appleid-ifane[.]com app-id-itunes[.]vip bugi1man[.]info www.apple-ifngiphone[ |
| domain | appleid-iphone.com | -yd[.]top www.icloud[.]com-ioseat[.]cn casinosmart[.]online appleid-iphone[.]com www.aducrea[.]online apple-icloud-idcos[.]top ggga[.]xyz |
| domain | apple-id.vip | licious domains: www.primoprime[.]com www.adultcre[.]online apple-id[.]vip iz-icloud[.]cn icloud-appd[.]cn www.icloud-mayiphone[.]co |
| domain | apple-ifena.com | ww.aducrea[.]online apple-icloud-idcos[.]top ggga[.]xyz www.apple-ifena[.]com 24vipcpsins[.]online www.apple-lnciphone[.]com www.icloud |
| domain | apple-ifngiphone.com | appleid-ifane[.]com app-id-itunes[.]vip bugi1man[.]info www.apple-ifngiphone[.]com www.adultacream[.]online www.applefind-iphone[.]com www.i |
| domain | apple-ifoniphone.com | unes[.]vip www.iphone[.]id[.]firds[.]cn com-iosrnx[.]cn www.apple-ifoniphone[.]com www.apple-icloud-ac[.]cn appie-td[.]top tvbsports[.]nl ic |
| domain | apple-lnciphone.com | p ggga[.]xyz www.apple-ifena[.]com 24vipcpsins[.]online www.apple-lnciphone[.]com www.icloud[.]com.iosny[.]cn www.icloud[.]com-ioslga[.]cn |
| domain | bugi1man.info | ud[.]iosny[.]cn www.appleid-ifane[.]com app-id-itunes[.]vip bugi1man[.]info www.apple-ifngiphone[.]com www.adultacream[.]online www.a |
| domain | casino-lemnde.online | d[.]cn www.icloud-mayiphone[.]com theshoppingoffers[.]trade casino-lemnde[.]online tdpaas[.]com техталенто[.]рф www.icloud-fneiphone[.]com i |
| domain | casinosmart.online | com-iosrnx[.]cn appie-yd[.]top www.icloud[.]com-ioseat[.]cn casinosmart[.]online appleid-iphone[.]com www.aducrea[.]online apple-icloud-id |
| domain | com-iosrnx.cn | [.]com www.app-id-itunes[.]vip www.iphone[.]id[.]firds[.]cn com-iosrnx[.]cn www.apple-ifoniphone[.]com www.apple-icloud-ac[.]cn appie |
| domain | com-iosvnt.cn | ed[.]com www.appid[.]pxret-ios[.]cn www.iphone[.]firds[.]cn com-iosvnt[.]cn appie-pd[.]top prestige-rent[.]eu netrsy[.]com icloud[.]c |
| domain | gavkingate.info | .]com техталенто[.]рф www.icloud-fneiphone[.]com iosny[.]cn gavkingate[.]info icloud[.]iosny[.]cn www.appleid-ifane[.]com app-id-itunes |
| domain | ggga.xyz | -iphone[.]com www.aducrea[.]online apple-icloud-idcos[.]top ggga[.]xyz www.apple-ifena[.]com 24vipcpsins[.]online www.apple-lnci |
| domain | icloud-appd.cn | e[.]com www.adultcre[.]online apple-id[.]vip iz-icloud[.]cn icloud-appd[.]cn www.icloud-mayiphone[.]com theshoppingoffers[.]trade casi |
| domain | icloud.com | na[.]com 24vipcpsins[.]online www.apple-lnciphone[.]com www.icloud[.]com.iosny[.]cn www.icloud[.]com-ioslga[.]cn apple-icloud-ipho |
| domain | icloud.com-ioseat.cn | eu netrsy[.]com icloud[.]com-iosrnx[.]cn appie-yd[.]top www.icloud[.]com-ioseat[.]cn casinosmart[.]online appleid-iphone[.]com www.aducrea[. |
| domain | icloud.com-ioslga.cn | e www.apple-lnciphone[.]com www.icloud[.]com.iosny[.]cn www.icloud[.]com-ioslga[.]cn apple-icloud-iphone[.]cn недостаточно[.]рф icloud-myboo |
| domain | icloud.com-iosrnx.cn | -iosvnt[.]cn appie-pd[.]top prestige-rent[.]eu netrsy[.]com icloud[.]com-iosrnx[.]cn appie-yd[.]top www.icloud[.]com-ioseat[.]cn casinosmart |
| domain | icloud-fneiphone.com | ade casino-lemnde[.]online tdpaas[.]com техталенто[.]рф www.icloud-fneiphone[.]com iosny[.]cn gavkingate[.]info icloud[.]iosny[.]cn www.appl |
| domain | icloud-id.co | ]com www.apple-icloud-ac[.]cn appie-td[.]top tvbsports[.]nl icloud-id[.]co pixelko[.]info |
| domain | icloud.iosny.cn | ]рф www.icloud-fneiphone[.]com iosny[.]cn gavkingate[.]info icloud[.]iosny[.]cn www.appleid-ifane[.]com app-id-itunes[.]vip bugi1man[.] |
| domain | icloud-iphoneifed.com | com www.adultacream[.]online www.applefind-iphone[.]com www.icloud-iphoneifed[.]com www.appid[.]pxret-ios[.]cn www.iphone[.]firds[.]cn com-io |
| domain | icloud-mayiphone.com | .]online apple-id[.]vip iz-icloud[.]cn icloud-appd[.]cn www.icloud-mayiphone[.]com theshoppingoffers[.]trade casino-lemnde[.]online tdpaas[. |
| domain | icloud-mybook.com.cn | ]com-ioslga[.]cn apple-icloud-iphone[.]cn недостаточно[.]рф icloud-mybook[.]com[.]cn www.apple[.]com.iosny[.]cn lookogo[.]com www.app-id-itu |
| domain | iosny.cn | ine tdpaas[.]com техталенто[.]рф www.icloud-fneiphone[.]com iosny[.]cn gavkingate[.]info icloud[.]iosny[.]cn www.appleid-ifane[. |
| domain | iphone.firds.cn | www.icloud-iphoneifed[.]com www.appid[.]pxret-ios[.]cn www.iphone[.]firds[.]cn com-iosvnt[.]cn appie-pd[.]top prestige-rent[.]eu netrs |
| domain | iphone.id.firds.cn | [.]com.iosny[.]cn lookogo[.]com www.app-id-itunes[.]vip www.iphone[.]id[.]firds[.]cn com-iosrnx[.]cn www.apple-ifoniphone[.]com www.apple- |
| domain | iz-icloud.cn | : www.primoprime[.]com www.adultcre[.]online apple-id[.]vip iz-icloud[.]cn icloud-appd[.]cn www.icloud-mayiphone[.]com theshoppingof |
| domain | lookogo.com | но[.]рф icloud-mybook[.]com[.]cn www.apple[.]com.iosny[.]cn lookogo[.]com www.app-id-itunes[.]vip www.iphone[.]id[.]firds[.]cn com- |
| domain | netmarketshare.com | -2008-4844 and CVE-2009-0075 . According to statistics from netmarketshare[.]com, there are still 6.55% of users using Windows XP and 3.17 |
| domain | netrsy.com | irds[.]cn com-iosvnt[.]cn appie-pd[.]top prestige-rent[.]eu netrsy[.]com icloud[.]com-iosrnx[.]cn appie-yd[.]top www.icloud[.]com- |
| domain | pixelko.info | icloud-ac[.]cn appie-td[.]top tvbsports[.]nl icloud-id[.]co pixelko[.]info |
| domain | prestige-rent.eu | .]cn www.iphone[.]firds[.]cn com-iosvnt[.]cn appie-pd[.]top prestige-rent[.]eu netrsy[.]com icloud[.]com-iosrnx[.]cn appie-yd[.]top www. |
| domain | primoprime.com | and patch your system in time. IOCs Malicious domains: www.primoprime[.]com www.adultcre[.]online apple-id[.]vip iz-icloud[.]cn iclou |
| domain | tdpaas.com | hone[.]com theshoppingoffers[.]trade casino-lemnde[.]online tdpaas[.]com техталенто[.]рф www.icloud-fneiphone[.]com iosny[.]cn gav |
| domain | theshoppingoffers.trade | iz-icloud[.]cn icloud-appd[.]cn www.icloud-mayiphone[.]com theshoppingoffers[.]trade casino-lemnde[.]online tdpaas[.]com техталенто[.]рф www.i |
| domain | tvbsports.nl | le-ifoniphone[.]com www.apple-icloud-ac[.]cn appie-td[.]top tvbsports[.]nl icloud-id[.]co pixelko[.]info |
| domain | twlife.tlgins.com.tw | cryptocurrency miner hosted on a domain, there is a domain “twlife[.]tlgins[.]com[.]tw” which hosted the cryptocurrency miner payload “wu[.] |
| ipv4 | 210.21.11.205 | alicious domains, however we found a malicious link (hxxp://210.21.11[.]205/HDCRMWEBSERVICE/bin/aspshell[.]html) hosting malicious co |
| url | http://210.21.11.205/HDCRMWEBSERVICE/bin/aspshell.html | d via malicious domains, however we found a malicious link (hxxp://210.21.11[.]205/HDCRMWEBSERVICE/bin/aspshell[.]html) hosting malicious content on the IP address instead of |
From the original article
7 min read at unit42.paloaltonetworks.com
In this blog, Unit 42 is sharing analysis and statistics from our Email Link Analysis (ELINK) from the first quarter of 2018 and highlighting interesting findings of current web threats.
By Tao Yan, Bo Qu, Zhanglin He, Rongbo Shao · unit42.paloaltonetworks.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.