Webshell Archives

Criminal IP Analysis Report on Zero-Day Vulnerability in Atlassian Confluence

According to Volexity 1), a cybersecurity company in Washington, DC, a webshell was discovered in Atlassian Confluence server during an incident response investigation. Volexity observed it as an Atlassian Confluence-related issue and generated an exploit code. However, the company later determined that it was a zero-day vulnerability that could execute remote code even after [...]

By Criminal IP|2022-08-04T18:13:06+09:00June 5th, 2022|Tags: Atlassian Confluence, china chopper, CTI Search Engine, CVE-2022-26134, hafnium, Infosec, volexity, Webshell, Zero-day, zero-day vulnerability in Atlassian Confluence|1 Comment

Criminal IP Analysis Report on Recent Hidden Malicious Code Sites on a Chinese HFS HTTP File Servers

NAS has become an increasingly common way to handle files and backup storage. As usage increases, NAS security issues, particularly with QNAP and Synology products, are frequently spotted. In addition to its vulnerabilities with CVE ID, critical NAS data is exposed to the internet defenselessly, making it easy to be leaked by simple attacks that [...]

By Criminal IP|2022-08-04T16:33:49+09:00May 18th, 2022|Tags: api.aspx, Asset Search, avp.exe, HFS, HFS HTTP File Server Files, http file server, Webshell|1 Comment