Posted 3/9/2024, 3:08:16 PM
Hackers Quickly Exploit New Vulnerabilities, Infect Servers with Custom Malware
- Magnet Goblin hackers exploit 1-day vulnerabilities to breach servers and deploy custom malware like NerbianRAT and MiniNerbian.
- They are quick to leverage newly disclosed flaws, sometimes within a day of a PoC release.
- Targeted devices include Ivanti, Apache, ConnectWise, Qlik Sense, and Magento.
- NerbianRAT has Linux and Windows variants for command execution and data theft.
- MiniNerbian is a simplified HTTP backdoor likely used as a backup tool.