Cybercrime underground flush with shipping companies’ credentials

Intel 471 · 2 Nov 2021 · github.com · Licence: CC-BY-SA-4.0; sources/annoctr/LICENSE.txt

CVEs this report names

1 CVE

CVE-2018-13379Fortinet FortiOS SSL VPN Path Traversal Vulnerability
Fortinet · FortiOSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing Application5 reports
>99.9%Top 0.01%
89.9priority

Where it names them

CVE-2018-13379

The actor claimed he obtained the credentials through a path traversal vulnerability in Fortinet’s FortiGate secure sockets layer (SSL) VPN web portal (CVE-2018-13379).

Original ↗

Techniques drawn from this report

1 link, in kill-chain order

Credential Access Exploitation for Credential Access T1212 for CVE-2018-13379

MITRE CTID mapping of the CVE

The actor claimed he obtained the credentials through a path traversal vulnerability in Fortinet’s FortiGate secure sockets layer (SSL) VPN web portal (CVE-2018-13379).

Original ↗