Webshell Archives

Criminal IP Analysis Report on Zero-Day Vulnerability in Atlassian Confluence

According to Volexity 1), a cybersecurity company based in Washington, DC, a webshell was discovered in the Atlassian Confluence server during an incident response investigation. Initially believed to be an issue specific to Atlassian Confluence, Volexity developed an exploit code. However, further analysis revealed that the vulnerability was a zero-day exploit capable of executing remote [...]

By Criminal IP|2023-05-16T09:58:04+09:00June 5th, 2022|Tags: Atlassian Confluence, china chopper, CTI Search Engine, CVE-2022-26134, hafnium, Infosec, volexity, Webshell, Zero-day, zero-day vulnerability in Atlassian Confluence|2 Comments

Criminal IP Analysis Report: Recent Discovery of Hidden Malicious Code Sites on Chinese HFS HTTP File Servers

With the growing need for efficient file handling and backup storage, Network Attached Storage (NAS) has emerged as a widely adopted solution. However, this increased usage has also brought attention to significant security issues surrounding NAS, particularly concerning popular products like QNAP and Synology. Besides the vulnerabilities identified with CVE ID, NAS systems also face [...]

By Criminal IP|2023-05-23T14:30:28+09:00May 18th, 2022|Tags: api.aspx, Asset Search, avp.exe, HFS, HFS HTTP File Server Files, http file server, Webshell|1 Comment