Technical Analysis: Black Basta Malware Overview
quadrantsec.com · Undated · Licence: TRAM repository license; underlying reports not cleared for redistribution
CVEs this report names
1 CVE- CVE-1999-0911Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and…Public exploit1 report38.1%Top 1.4%28.6priority
Where it names them
CVE-1999-0911 Original (opens in a new tab) ↗
From the analyst's perspective, the only alert that was generated and brought to the SOC was a Suricata FTP rule looking for CVE 1999-0911, related to an overflow using the MKD command.
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.