Chinese-linked Hackers May Be Exploiting Latest Ivanti Vulnerability
Tags
country: China
maec-delivery-vectors: Watering Hole
attack-pattern: Data Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Remote Desktop Protocol - T1021.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Ssh - T1021.004 Tool - T1588.002 Vulnerabilities - T1588.006 Remote Desktop Protocol - T1076
Show in Graph
Common Information
Type Value
UUID 37c258e8-8bae-4127-bd82-ad72a56028a2
Fingerprint bede8dd1c0c7934f
Analysis status DONE
Considered CTI value 2
Text language
Published Jan. 9, 2025, 3:41 p.m.
Added to db Jan. 9, 2025, 10:06 p.m.
Last updated Jan. 17, 2025, 2:02 p.m.
Headline Chinese-linked Hackers May Be Exploiting Latest Ivanti Vulnerability
Title Chinese-linked Hackers May Be Exploiting Latest Ivanti Vulnerability
Detected Hints/Tags/Attributes 52/3/4
Source URLs
Redirection Url
Details Source https://securityboulevard.com/2025/01/chinese-linked-hackers-may-be-exploiting-latest-ivanti-vulnerability/
URL Provider
Details Provider Source level domain
Details securityboulevard.com securityboulevard.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 226 ✔ Security Boulevard https://securityboulevard.com/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 66 
cve-2025-0282
Details CVE 49 
cve-2025-0283
Details Mandiant Uncategorized Groups 15 
UNC5337
Details Mandiant Uncategorized Groups 25 
UNC5221