NaturalFreshMall: a Vulnerable Magento Extension and a Mass Hack – Sansec
Tags
| country: | Bulgaria Netherlands |
| attack-pattern: | Data Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 |
Common Information
| Type | Value |
|---|---|
| UUID | 9aa9f442-a6d8-4a02-b34e-f44fd8ac5140 |
| Fingerprint | 150bd2d8dcada880 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Feb. 8, 2022, midnight |
| Added to db | Oct. 22, 2023, 10:39 p.m. |
| Last updated | Nov. 14, 2024, 11:02 a.m. |
| Headline | NaturalFreshMall: a Vulnerable Magento Extension and a Mass Hack |
| Title | NaturalFreshMall: a Vulnerable Magento Extension and a Mass Hack – Sansec |
| Detected Hints/Tags/Attributes | 34/2/131 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://sansec.io/research/naturalfreshmall-mass-hack |
| Details | Redirection | http://sansec.io/research/naturalfreshmall-mass-hack |
| Details | Redirection | https://sansec.io/research/naturalfreshmall-mass-hack/ |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 221 | ✔ | Sansec - experts in eCommerce security | https://sansec.io/atom.xml | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 4 | naturalfreshmall.com |
|
| Details | Domain | 2 | networksdelmanana.com |
|
| Details | File | 2 | api_1.php |
|
| Details | File | 47 | api.php |
|
| Details | File | 33 | install.php |
|
| Details | File | 2 | sc_api.php |
|
| Details | File | 27 | phpinfo.php |
|
| Details | File | 7 | adminer.php |
|
| Details | File | 8 | html.php |
|
| Details | File | 2 | test.jpeg |
|
| Details | File | 2 | panch.jpg |
|
| Details | File | 2 | cartcheckout.php |
|
| Details | File | 7 | loader.php |
|
| Details | File | 19 | controller.php |
|
| Details | File | 2 | upldr.php |
|
| Details | File | 6 | conf.php |
|
| Details | File | 2 | customer.csv |
|
| Details | File | 4 | pixel.js |
|
| Details | IPv4 | 2 | 45.72.31.112 |
|
| Details | IPv4 | 2 | 132.255.135.230 |
|
| Details | IPv4 | 2 | 132.255.135.51 |
|
| Details | IPv4 | 2 | 138.36.92.216 |
|
| Details | IPv4 | 2 | 138.36.92.253 |
|
| Details | IPv4 | 2 | 138.36.93.206 |
|
| Details | IPv4 | 2 | 138.36.94.2 |
|
| Details | IPv4 | 2 | 138.36.94.224 |
|
| Details | IPv4 | 2 | 138.36.94.241 |
|
| Details | IPv4 | 2 | 138.36.94.59 |
|
| Details | IPv4 | 2 | 138.94.216.131 |
|
| Details | IPv4 | 2 | 138.94.216.172 |
|
| Details | IPv4 | 2 | 138.94.216.186 |
|
| Details | IPv4 | 2 | 138.94.216.230 |
|
| Details | IPv4 | 2 | 141.193.20.147 |
|
| Details | IPv4 | 2 | 144.168.218.117 |
|
| Details | IPv4 | 2 | 144.168.218.136 |
|
| Details | IPv4 | 2 | 144.168.218.249 |
|
| Details | IPv4 | 2 | 144.168.218.70 |
|
| Details | IPv4 | 2 | 144.168.218.94 |
|
| Details | IPv4 | 2 | 144.168.221.92 |
|
| Details | IPv4 | 2 | 186.179.14.102 |
|
| Details | IPv4 | 2 | 186.179.14.134 |
|
| Details | IPv4 | 2 | 186.179.14.179 |
|
| Details | IPv4 | 2 | 186.179.14.204 |
|
| Details | IPv4 | 2 | 186.179.14.44 |
|
| Details | IPv4 | 2 | 186.179.14.76 |
|
| Details | IPv4 | 2 | 186.179.14.97 |
|
| Details | IPv4 | 2 | 186.179.39.183 |
|
| Details | IPv4 | 2 | 186.179.39.226 |
|
| Details | IPv4 | 2 | 186.179.39.35 |
|
| Details | IPv4 | 2 | 186.179.39.7 |
|
| Details | IPv4 | 2 | 186.179.39.74 |
|
| Details | IPv4 | 2 | 186.179.47.205 |
|
| Details | IPv4 | 2 | 186.179.47.39 |
|
| Details | IPv4 | 2 | 191.102.149.106 |
|
| Details | IPv4 | 2 | 191.102.149.197 |
|
| Details | IPv4 | 2 | 191.102.149.253 |
|
| Details | IPv4 | 2 | 191.102.163.202 |
|
| Details | IPv4 | 2 | 191.102.163.208 |
|
| Details | IPv4 | 2 | 191.102.163.7 |
|
| Details | IPv4 | 2 | 191.102.163.74 |
|
| Details | IPv4 | 2 | 191.102.170.173 |
|
| Details | IPv4 | 2 | 191.102.170.81 |
|
| Details | IPv4 | 2 | 191.102.174.128 |
|
| Details | IPv4 | 2 | 191.102.174.211 |
|
| Details | IPv4 | 2 | 191.102.174.239 |
|
| Details | IPv4 | 2 | 191.102.174.247 |
|
| Details | IPv4 | 2 | 191.102.174.52 |
|
| Details | IPv4 | 2 | 191.102.179.22 |
|
| Details | IPv4 | 2 | 191.102.179.31 |
|
| Details | IPv4 | 2 | 191.102.179.62 |
|
| Details | IPv4 | 2 | 192.198.123.164 |
|
| Details | IPv4 | 2 | 192.198.123.225 |
|
| Details | IPv4 | 2 | 192.198.123.226 |
|
| Details | IPv4 | 2 | 192.198.123.43 |
|
| Details | IPv4 | 2 | 192.241.67.128 |
|
| Details | IPv4 | 2 | 193.32.8.1 |
|
| Details | IPv4 | 2 | 193.32.8.33 |
|
| Details | IPv4 | 2 | 193.32.8.63 |
|
| Details | IPv4 | 2 | 193.32.8.76 |
|
| Details | IPv4 | 2 | 193.8.238.91 |
|
| Details | IPv4 | 2 | 195.123.246.212 |
|
| Details | IPv4 | 2 | 198.245.77.132 |
|
| Details | IPv4 | 2 | 198.245.77.217 |
|
| Details | IPv4 | 2 | 198.245.77.253 |
|
| Details | IPv4 | 2 | 206.127.242.99 |
|
| Details | IPv4 | 2 | 209.127.104.174 |
|
| Details | IPv4 | 2 | 209.127.105.225 |
|
| Details | IPv4 | 2 | 209.127.105.73 |
|
| Details | IPv4 | 2 | 209.127.106.211 |
|
| Details | IPv4 | 2 | 209.127.106.44 |
|
| Details | IPv4 | 2 | 209.127.107.141 |
|
| Details | IPv4 | 2 | 209.127.107.169 |
|
| Details | IPv4 | 2 | 209.127.107.187 |
|
| Details | IPv4 | 2 | 209.127.109.138 |
|
| Details | IPv4 | 2 | 209.127.109.225 |
|
| Details | IPv4 | 2 | 209.127.109.87 |
|
| Details | IPv4 | 2 | 209.127.110.144 |
|
| Details | IPv4 | 2 | 209.127.110.177 |
|
| Details | IPv4 | 2 | 209.127.111.68 |
|
| Details | IPv4 | 2 | 209.127.111.99 |
|
| Details | IPv4 | 2 | 209.127.116.101 |
|
| Details | IPv4 | 2 | 209.127.116.167 |
|
| Details | IPv4 | 2 | 209.127.116.231 |
|
| Details | IPv4 | 2 | 209.127.117.214 |
|
| Details | IPv4 | 2 | 209.127.117.49 |
|
| Details | IPv4 | 2 | 209.127.118.136 |
|
| Details | IPv4 | 2 | 209.127.118.96 |
|
| Details | IPv4 | 2 | 209.127.172.15 |
|
| Details | IPv4 | 2 | 209.127.172.60 |
|
| Details | IPv4 | 2 | 209.127.172.99 |
|
| Details | IPv4 | 2 | 209.127.173.13 |
|
| Details | IPv4 | 2 | 209.127.173.154 |
|
| Details | IPv4 | 2 | 209.127.173.215 |
|
| Details | IPv4 | 2 | 209.127.174.177 |
|
| Details | IPv4 | 2 | 209.127.175.113 |
|
| Details | IPv4 | 2 | 209.127.97.6 |
|
| Details | IPv4 | 2 | 209.127.98.244 |
|
| Details | IPv4 | 2 | 209.127.98.81 |
|
| Details | IPv4 | 2 | 209.127.98.91 |
|
| Details | IPv4 | 2 | 209.127.99.16 |
|
| Details | IPv4 | 2 | 209.127.99.205 |
|
| Details | IPv4 | 2 | 217.170.207.111 |
|
| Details | IPv4 | 2 | 23.106.125.64 |
|
| Details | IPv4 | 2 | 45.72.112.143 |
|
| Details | IPv4 | 2 | 45.72.18.133 |
|
| Details | IPv4 | 2 | 45.72.18.234 |
|
| Details | IPv4 | 2 | 45.72.18.236 |
|
| Details | IPv4 | 2 | 45.72.85.178 |
|
| Details | IPv4 | 2 | 45.72.86.142 |
|
| Details | IPv4 | 2 | 45.72.86.201 |
|
| Details | Url | 2 | https://naturalfreshmall.com/image/pixel.js |