4 ms·
"once it somehow gets installed?" The report mentions: "we conclude ... exploited an unknown web application vulnerability ... ." The chain of events, post in
by gerdesj 2y ago
"once it somehow gets installed?"
The report mentions: "we conclude ... exploited an unknown web application vulnerability ... ."
The chain of events, post initial exploit, is all very well but what was the initial point of entry? The IoCs etc are welcome - thanks.
- aorloff 2y agoI thought SQL injection but actually Tomcat ? Might be just an old unpatched server allowing PUTs
- deleted 2y ago[deleted]