Lucene search
+L

Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824

🗓️ 18 Aug 2025 09:00:10Reported by Sergey Lozhkin, Leonid Bezvershenko, Kirill Korchemny, Ilya SavelyevType 
securelist
 securelist
🔗 securelist.com👁 16 Views

PipeMagic backdoor evolves from 2022 RansomExx to CVE-2025-29824; patch 2025-04; Brazil and Saudi Arabia infections; Rufus loader; initial access via 2017-0144.

Related
ReporterTitlePublishedViews
Family
gitee
Gitee
Exploit for CVE-2017-0143
6 Sep 202500:38
gitee
gitee
Gitee
Exploit for CVE-2017-0144
1 Jul 202016:26
gitee
gitee
Gitee
Exploit for CVE-2017-0144
26 Apr 202009:31
gitee
gitee
Gitee
Exploit for CVE-2017-0144
28 Mar 201901:46
gitee
gitee
Gitee
Exploit for CVE-2017-0144
29 Sep 202122:39
gitee
gitee
Gitee
Exploit for CVE-2017-0144
27 Jul 202503:46
gitee
gitee
Gitee
Exploit for CVE-2017-0144
26 Apr 202009:31
gitee
gitee
Gitee
Exploit for CVE-2017-0144
17 Jul 202001:25
gitee
gitee
Gitee
Exploit for CVE-2017-0144
26 Apr 202009:31
gitee
githubexploit
GithubExploit
Exploit for CVE-2017-0144
27 Aug 202516:39
githubexploit
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation