Mallox ransomware: in-depth analysis and evolution

🗓️ 04 Sep 2024 10:00:02Reported by Fedor Sinitsyn, Yanis ZinchenkoType

In-depth analysis of the dangerous and evolving Mallox ransomware, responsible for significant damage to organizations worldwide. Its history, aliases, development, and RaaS affiliate program are examined.

Reporter	Title	Published	Views	Family All 75
zdt	SQL Server Reporting Services (SSRS) ViewState Deserialization Exploit	12 Mar 202000:00	–	zdt
zdt	Microsoft SQL Server Reporting Services 2016 - Remote Code Execution Exploit	17 Sep 202000:00	–	zdt
Gitee	Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform	8 Dec 202020:38	–	gitee
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	18 Feb 202016:17	–	githubexploit
GithubExploit	Exploit for CVE-2019-1068	4 Feb 202121:40	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	5 Dec 202510:43	–	githubexploit
ATTACKERKB	CVE-2020-0618	11 Feb 202000:00	–	attackerkb
BDU FSTEC	The vulnerability of the Microsoft SQL Server relational database management system, related to deficiencies in the processing of internal functions, allows an attacker to execute arbitrary code.	18 Jul 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SQL Server relational database management system, related to insufficient validation of input data, allows attackers to execute arbitrary code.	4 Mar 202000:00	–	bdu_fstec
Circl	CVE-2019-1068	12 Feb 202112:57	–	circl

04 Sep 2024 10:00Current

7High risk

Vulners AI Score7

CVSS 38.8

EPSS0.99022

SSVC