This new malware is scanning the internet for systems info on valuable targets

guest · Apr 3, 2019

This new malware is scanning the internet for systems info on valuable targets
April 3, 2019
https://www.zdnet.com/article/this-...nternet-for-systems-info-on-valuable-targets/

A new form of malware is scanning the internet for exposed web services and default passwords in what's thought to be a reconnaissance operation – one which might signal a larger cyberattack is to come.

Researchers at AT&T Alien Labs first spotted the malware in March and have named it Xwo after its primary module name [...] it's main focus is scanning for credentials and exposed services and sending information back to its command and control server.

Xwo collects information about the use of default credentials in services such as FTP, MySQL, PostgreSQL, MongoDB, Redis, Memcached, as well as default credentials and misconfigurations for Tomcat, an open source implementation of the Java Servlet.
The malware also looks to collect information about Default SVN and Git paths, Git repository format version content, PhP admin details and more
Click to expand...

Log in or Sign up

This new malware is scanning the internet for systems info on valuable targets

guest Guest

Log in or Sign up

This new malware is scanning the internet for systems info on valuable targets

guest Guest

Useful Searches