Australian web hosting providers compromised by Gh0st RAT, ACSC reveals

guest · Jan 29, 2019

Australian web hosting providers compromised by Gh0st RAT, ACSC reveals
January 29, 2019
https://www.computerworld.com.au/article/656811/australian-web-hosting-providers-compromised-by-gh0st-rat-acsc-reveals/

The Australian Cyber Security Centre today revealed details of its investigation into the compromise of at least eight local web hosting providers.

The ACSC has published a report detailing its May 2018 investigation, which it dubbed ‘Operation Manic Menagerie’. The hosting providers were compromised by a previously variant of the ‘Gh0st’ remote access tool (RAT), the report revealed.

“The actor favoured techniques such as web shells to gain initial access, exploiting vulnerable web applications to upload the web shells,” the ACSC investigation report states.
“The actor rarely required privilege escalation but demonstrated the capability and persistence to escalate privilege when necessary.”
Click to expand...

The ACSC report, which is available online (PDF), includes a range of recommendations for hosting providers and their customers, including rolling out application and OS patches, and not running web services with administrative privileges.
Click to expand...

"Manic Menagerie: Malicious activity targeting web hosting providers" (PDF): https://cyber.gov.au/government/publications/manic-menagerie-targeting-web-hosting-providers/Report_Manic_Menagerie.pdf

Log in or Sign up

Australian web hosting providers compromised by Gh0st RAT, ACSC reveals

guest Guest

Log in or Sign up

Australian web hosting providers compromised by Gh0st RAT, ACSC reveals

guest Guest

Useful Searches