Cyble Honeypot Sensors Detect WordPress Plugin Attack, New Banking Trojan - Cyble
Tags
| country: | Bulgaria China United States Of America |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Data Email Addresses - T1589.002 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Vulnerabilities - T1588.006 Brute Force - T1110 |
Common Information
| Type | Value |
|---|---|
| UUID | 4841d5fe-f32e-4ca2-a4fb-ce2fea66ba8c |
| Fingerprint | ad907011a921de83 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | Oct. 1, 2024, 1:37 a.m. |
| Added to db | Oct. 1, 2024, 8:30 a.m. |
| Last updated | Oct. 10, 2024, 8:45 a.m. |
| Headline | Cyble Honeypot Sensors Detect WordPress Plugin Attack, New Banking Trojan |
| Title | Cyble Honeypot Sensors Detect WordPress Plugin Attack, New Banking Trojan - Cyble |
| Detected Hints/Tags/Attributes | 55/3/20 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 98 | ✔ | Cyble | https://cyble.com/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 2 | cve-2024-27956 |
|
| Details | CVE | 37 | cve-2024-4577 |
|
| Details | CVE | 46 | cve-2024-36401 |
|
| Details | CVE | 24 | cve-2024-7029 |
|
| Details | CVE | 9 | cve-2024-7954 |
|
| Details | Domain | 1 | szhualilian.com |
|
| Details | Domain | 1 | student.htw-berlin.de |
|
| Details | Domain | 1 | qiau.ac.ir |
|
| Details | Domain | 2 | natwest.co.uk |
|
| Details | Domain | 2 | ip.linodeusercontent.com |
|
| Details | Domain | 26 | usa.com |
|
| Details | 1 | info@szhualilian.com |
||
| Details | 1 | info@student.htw-berlin.de |
||
| Details | 1 | m.sharifi@qiau.ac.ir |
||
| Details | 1 | walsh.philip@natwest.co.uk |
||
| Details | 2 | support@ip.linodeusercontent.com |
||
| Details | 2 | info@usa.com |
||
| Details | sha256 | 3 | 83eea636c3f04ff1b46963680eb4bac7177e77bbc40b0d3426f5cf66a0c647ae |
|
| Details | sha256 | 3 | 6cd0fbfb088a95b239e42d139e27354abeb08c6788b6083962943522a870cb98 |
|
| Details | sha256 | 3 | 117aa133d19ea84a4de87128f16384ae0477f3ee9dd3e43037e102d7039c79d9 |