Threat Intelligence Report 8th October – 14th October
Tags
cmtmf-attack-pattern: Application Layer Protocol Command And Scripting Interpreter Exploit Public-Facing Application Process Injection
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Application Layer Protocol - T1437 Application Shimming - T1546.011 Botnet - T1583.005 Botnet - T1584.005 Cloud Services - T1021.007 Command And Scripting Interpreter - T1623 Credentials - T1589.001 Cron - T1053.003 Dll Side-Loading - T1574.002 Exploitation For Privilege Escalation - T1404 Exploit Public-Facing Application - T1377 Hijack Execution Flow - T1625 Hijack Execution Flow - T1574 Ingress Tool Transfer - T1544 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Process Injection - T1631 Remote Desktop Protocol - T1021.001 Server Software Component - T1505 Software - T1592.002 Web Shell - T1505.003 Tool - T1588.002 Vulnerabilities - T1588.006 Standard Application Layer Protocol - T1071 Application Shimming - T1138 Brute Force - T1110 Command-Line Interface - T1059 Dll Side-Loading - T1073 Execution Through Module Load - T1129 Exploit Public-Facing Application - T1190 Exploitation For Privilege Escalation - T1068 Indicator Removal On Host - T1070 Remote File Copy - T1105 Powershell - T1086 Process Injection - T1055 Remote Desktop Protocol - T1076 Remote System Discovery - T1018 Web Shell - T1100 Exploit Public-Facing Application Remote System Discovery
Show in Graph
Common Information
Type Value
UUID 74f07f5d-9bd1-49a1-812e-d9582bac54b9
Fingerprint b676a9518e17868b
Analysis status DONE
Considered CTI value 2
Text language
Published Oct. 14, 2024, midnight
Added to db Oct. 14, 2024, 10:11 a.m.
Last updated Nov. 17, 2024, 6:56 p.m.
Headline Threat Intelligence Report October 8 - October 14 2024
Title Threat Intelligence Report 8th October – 14th October
Detected Hints/Tags/Attributes 153/3/21
Source URLs
Redirection Url
Details Source https://redpiranha.net/news/threat-intelligence-report-october-8-october-14-2024
URL Provider
Details Provider Source level domain
Details redpiranha.net redpiranha.net
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 482 ✔ Red Piranha https://redpiranha.net/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 61 
cve-2024-43573
Details CVE 59 
cve-2024-43572
Details CVE 53 
cve-2024-43047
Details CVE 41 
cve-2024-9380
Details CVE 34 
cve-2024-9379
Details CVE 53 
cve-2024-23113
Details Domain 12 
forum.redpiranha.net
Details MITRE ATT&CK Techniques 542 
T1190
Details MITRE ATT&CK Techniques 409 
T1566
Details MITRE ATT&CK Techniques 460 
T1059.001
Details MITRE ATT&CK Techniques 120 
T1129
Details MITRE ATT&CK Techniques 44 
T1053.003
Details MITRE ATT&CK Techniques 11 
T1546.011
Details MITRE ATT&CK Techniques 208 
T1068
Details MITRE ATT&CK Techniques 440 
T1055
Details MITRE ATT&CK Techniques 247 
T1070
Details MITRE ATT&CK Techniques 227 
T1574.002
Details MITRE ATT&CK Techniques 243 
T1018
Details MITRE ATT&CK Techniques 444 
T1071
Details MITRE ATT&CK Techniques 492 
T1105
Details Url 1 
https://forum.redpiranha.net/t/known-exploited-vulnerabilities-catalog-2nd-week-of-october-2024/512