When coin miners evolve, Part 2: Hunting down LemonDuck and LemonCat attacks

🗓️ 29 Jul 2021 19:00:59Reported by Eric AvenaType

mssecure

mssecure🔗 www.microsoft.com👁 428 Views

When coin miners evolve: Hunting down LemonDuck and LemonCat attacks, describing evolved LemonDuck malware behavior and attacker tactic

Reporter	Title	Published	Views	Family All 971
Gitee	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	8 Dec 202020:37	–	gitee
Gitee	Exploit for CVE-2017-0143	6 Sep 202500:38	–	gitee
Gitee	Exploit for Path Traversal in Mikrotik Routeros	21 Oct 202111:42	–	gitee
Gitee	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	6 May 202015:20	–	gitee
Gitee	Exploit for CVE-2013-0422	20 Dec 202018:43	–	gitee
Gitee	Exploit for Path Traversal in Mikrotik Routeros	27 Jul 202504:24	–	gitee
Gitee	Exploit for CVE-2013-0422	5 Aug 202014:46	–	gitee
Gitee	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	6 Jul 202114:08	–	gitee
Gitee	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	15 Nov 202122:01	–	gitee
Gitee	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	4 Jun 202023:09	–	gitee

29 Jul 2021 19:00Current

0.5Low risk

Vulners AI Score0.5

EPSS0.99999

coin miners lemonduck lemoncat malware cryptocurrency mining botnet credential theft security controls email campaigns lateral movement human-operated activity investigating attacks mitigation recommendations proxylogon microsoft exchange server exploits web shells self-patching behavior soc analysts