Threat Intelligence Report October 15 - October 21 2024 | Red Piranha
Tags
cmtmf-attack-pattern: Application Layer Protocol Command And Scripting Interpreter Exploit Public-Facing Application Process Injection
country: Bangladesh India Romania United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Application Layer Protocol - T1437 Cloud Services - T1021.007 Command And Scripting Interpreter - T1623 Credentials - T1589.001 Cron - T1053.003 Defacement - T1491 Dll Side-Loading - T1574.002 Exploitation For Privilege Escalation - T1404 Exploit Public-Facing Application - T1377 Exploits - T1587.004 Exploits - T1588.005 Hijack Execution Flow - T1625 Hijack Execution Flow - T1574 Ingress Tool Transfer - T1544 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Process Injection - T1631 Remote Desktop Protocol - T1021.001 Server Software Component - T1505 Software - T1592.002 Web Shell - T1505.003 Vulnerabilities - T1588.006 Standard Application Layer Protocol - T1071 Command-Line Interface - T1059 Credential Dumping - T1003 Dll Side-Loading - T1073 Exploit Public-Facing Application - T1190 Exploitation For Privilege Escalation - T1068 Remote File Copy - T1105 Powershell - T1086 Process Injection - T1055 Remote Desktop Protocol - T1076 Remote System Discovery - T1018 Web Shell - T1100 Exploit Public-Facing Application Remote System Discovery
Show in Graph
Common Information
Type Value
UUID a39a5da8-afa2-4596-ace4-46b8f13c280c
Fingerprint 94b200719e938e9b
Analysis status DONE
Considered CTI value 2
Text language
Published Oct. 22, 2024, midnight
Added to db Oct. 22, 2024, 3:02 a.m.
Last updated Nov. 17, 2024, 6:56 p.m.
Headline Threat Intelligence Report October 15 - October 21 2024
Title Threat Intelligence Report October 15 - October 21 2024 | Red Piranha
Detected Hints/Tags/Attributes 136/4/22
Source URLs
Redirection Url
Details Source https://redpiranha.net/news/threat-intelligence-report-october-15-october-21-2024
URL Provider
Details Provider Source level domain
Details redpiranha.net redpiranha.net
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 482 ✔ Red Piranha https://redpiranha.net/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 85 
cve-2024-8190
Details CVE 70 
cve-2024-8963
Details CVE 41 
cve-2024-9380
Details CVE 46 
cve-2024-28987
Details CVE 49 
cve-2024-9680
Details CVE 45 
cve-2024-30088
Details CVE 95 
cve-2024-40711
Details Domain 12 
forum.redpiranha.net
Details File 1204 
index.php
Details File 31 
users.php
Details File 12 
reports.php
Details MITRE ATT&CK Techniques 409 
T1566
Details MITRE ATT&CK Techniques 542 
T1190
Details MITRE ATT&CK Techniques 460 
T1059.001
Details MITRE ATT&CK Techniques 44 
T1053.003
Details MITRE ATT&CK Techniques 208 
T1068
Details MITRE ATT&CK Techniques 440 
T1055
Details MITRE ATT&CK Techniques 227 
T1574.002
Details MITRE ATT&CK Techniques 243 
T1018
Details MITRE ATT&CK Techniques 444 
T1071
Details MITRE ATT&CK Techniques 492 
T1105
Details Url 2 
https://forum.redpiranha.net/t/known-exploited-vulnerabilities-catalog-3rd-week-of-october-2024/513