Articles posted by Atos Threat Research team
Detailed analysis of the Zero- Day vulnerability in MOVEit transferKey TakeawaysA common feature among all exploited devices is a webshell named ‘human2.aspx’ located in the ‘C:\MOVEitTransfer\wwwroot’ public HTML folder. Mu...Analysis of Ivanti 0-days, CVE-2023-46805 & CVE-2024-21887IntroductionOn January 10, 2024, the cybersecurity organization Volexity reported the active exploitation of two critical zero-day vulnerabilities in Ivanti...Exposed Private Key of X.509 Certificate in SAP HANA Cockpit & SAP HANA Database ExplorerSAP HANA Cockpit users with access to the Database Explorer could retrieve the private keys of X.509 certificates. This could be used to impersonate the appl...Cl0p Ransomware Group activity related to data leaks from GoAnywhere MFTThe essentialsThe Threat Actor TA505 is deemed as a trendsetter for its ever-changing tactics, techniques, and procedures (TTPs).It targets numerous countrie...Snake MalwareTaken down by the FBI after 20 years of existenceKey TakeawaysIn a coordinated operation FBI with other organizations took down the Snake malware operational...Domain SpoofingIntroductionIn the dynamic landscape of cybersecurity, domain spoofing has emerged as an intricate and insidious stratagem employed by threat actors to decei...Abuse of Apache APISIX: Misconfigurations in the wildReport summaryDuring an assessment of exposed cloud-native environments, Atos TRC identified compromise activity targeting Apache APISIX¹ API gateway deploym...