One-day vulnerabilities exploited in Magnet Goblin attacks

Windows and Linux systems have been subjected to new attacks by the Magnet Goblin hacking operation that leveraged one-day vulnerabilities to facilitate malware distribution since 2022. Magnet Goblin exploited flaws impacting Ivanti Connect Secure, Apache Active MQ, Qlik Sense, ConnectWise ScreenConnect, and Magento to deploy the NerbianRAT and MiniNerbian payloads, as well as a custom WARPWIRE JavaScript stealer variant, according to a Check Point report.

Source: SC Magazine

 


Date:

Categorie(s):