Kinsing Malware Attacks Targeting Container Environment
aquasec.com · 3 Apr 2020 · Licence: not assessed; coordinator-only cache; do not redistribute
CVEs this report names
1 CVE- CVE-2023-32315Ignite Realtime Openfire Path Traversal VulnerabilityIgnite Realtime · OpenfireKEVPublic exploitHigh · 7.5T1505.003Web ShellT1202Indirect Command Execution+2 more · 1 report>99.9%Top 0.01%82.1priority
Where it names them
CVE-2023-32315 Original (opens in a new tab) ↗
Update (8/27/23) – Aqua Nautilus discovered a new campaign that exploits the Openfire vulnerability (CVE-2023-32315 to deploy Kinsing malware and a cryptominer.
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.