[Trend]Drupal Vulnerability (CVE-2018-7602) Exploited to Deliver Monero-Mining Malware

[igor51]

Drupal Vulnerability (CVE-2018-7602) Exploited to Deliver Monero-Mining Malware

We were able to observe a series of network attacks exploiting CVE-2018-7602, a security flaw in the Drupal content management framework. For now, these attacks aim to turn affected systems into Monero-mining bots. Of note are its ways of hiding behind the Tor network to elude detection and how it checks the affected system first before infecting it with a cryptocurrency-mining malware. While these attacks currently deliver resource-stealing and system performance-slowing malware, the vulnerability can be used as a doorway to other threats.

The post Drupal Vulnerability (CVE-2018-7602) Exploited to Deliver Monero-Mining Malware appeared first on .

Source: Drupal Vulnerability (CVE-2018-7602) Exploited to Deliver Monero-Mining Malware