Disrupt Innovate #VizagFintechFestival

Observed Actors using Apache Struts OGNL Expression Injection (CVE-2017-5638) exploits for mining activities Source & Payload 222.89.70.216 117.34.80.53 hxxp://UeR.ReiyKiQ.ir/download.exe af6080bf195eaaf4e117f4bdde99eda6d8b470cfd57d0533067e2a37a8e3861c #threatintel #struts #DFIR

#Breaking #DNSBlackout the intern had an idea