Nefilim Ransomware
blog.qualys.com · Undated · Licence: TRAM repository license; underlying reports not cleared for redistribution
CVEs this report names
2 CVEs- CVE-2019-19781Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution VulnerabilityCitrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceKEVRansomwarePublic exploitCritical · 9.8T1133External Remote ServicesT1059Command and Scripting Interpreter+1 more · 8 reports>99.9%Top 0.01%89.9priority
- CVE-2019-11634Citrix Workspace Application and Receiver for Windows Remote Code Execution VulnerabilityCitrix · Workspace Application and Receiver for WindowsKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+5 more · 1 report8.1%Top 5.2%77.7priority
Where it names them
CVE-2019-19781 Original (opens in a new tab) ↗
Nefilim targets vulnerabilities such as CVE-2019-11634 and CVE-2019-19781 in Citrix gateway devices, identified in December 2019 and patched in January 2020.
CVE-2019-11634 Original (opens in a new tab) ↗
Nefilim targets vulnerabilities such as CVE-2019-11634 and CVE-2019-19781 in Citrix gateway devices, identified in December 2019 and patched in January 2020.
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.