New Linux Malware Campaign Exploits Oracle Weblogic to Mine Cryptocurrency - RedPacket Security
Tags
country: Germany
attack-pattern: Data Botnet - T1583.005 Botnet - T1584.005 Confluence - T1213.001 Credentials - T1589.001 Cron - T1053.003 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Ssh - T1021.004 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID 952d2849-6c76-450e-b7e7-6de6ff293299
Fingerprint 95a995139a37b702
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 14, 2024, 12:02 a.m.
Added to db Sept. 14, 2024, 1:27 a.m.
Last updated Oct. 15, 2024, 11:54 p.m.
Headline New Linux Malware Campaign Exploits Oracle Weblogic to Mine Cryptocurrency
Title New Linux Malware Campaign Exploits Oracle Weblogic to Mine Cryptocurrency - RedPacket Security
Detected Hints/Tags/Attributes 29/2/4
Source URLs
Redirection Url
Details Source https://www.redpacketsecurity.com/new-linux-malware-campaign-exploits-oracle-weblogic-to-mine-cryptocurrency/
URL Provider
Details Provider Source level domain
Details redpacketsecurity.com www.redpacketsecurity.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 361 ✔ RedPacket Security https://www.redpacketsecurity.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Autonomous System Number 8 
AS210644
Details Autonomous System Number 3 
AS216246
Details IPv4 15 
89.185.85.102
Details IPv4 10 
185.174.136.204