Xbash Combines Botnet, Ransomware, Coinmining in Worm that Targets Linux and Windows
unit42.paloaltonetworks.com · 17 Sep 2018 · Licence: not cleared; local research copy only
CVEs this report names
1 CVE- CVE-2016-3088Apache ActiveMQ Improper Input Validation VulnerabilityApache · ActiveMQKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter2 reports98.5%Top 0.08%86.0priority
Where it names them
CVE-2016-3088 Original (opens in a new tab) ↗
ActiveMQ arbitrary file write vulnerability, CVE-2016-3088.
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.