Muhstik Botnet Exploits Highly Critical Drupal Bug

🗓️ 23 Apr 2018 22:13:25Reported by Lindsey O'DonnellType

threatpost🔗 threatpost.com👁 10917 Views

Muhstik botnet exploits critical Drupal bug to install cryptocurrency miners, launch DDoS attack

Reporter	Title	Published	Views	Family All 352
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	15 Oct 202515:06	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Drupal	31 Aug 202022:55	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Drupal	30 Mar 201808:52	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Drupal	8 Dec 202503:31	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Drupal	30 May 202610:03	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	28 Dec 201701:30	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Drupal	14 Apr 201818:26	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	27 May 202607:37	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Drupal	30 Mar 201814:23	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Drupal	12 Apr 201822:53	–	githubexploit

Source	Link
blog	www.blog.netlab.360.com/botnet-muhstik-is-actively-exploiting-drupal-cve-2018-7600-in-a-worm-style-en/
groups	www.groups.drupal.org/security/faq-2018-002
threatpost	www.threatpost.com/drupal-issues-highly-critical-patch-over-1m-sites-vulnerable/130859/
media	www.media.threatpost.com/wp-content/uploads/sites/103/2018/04/23162156/Botnet.png
twitter	www.twitter.com/hashtag/drupalgeddon
twitter	www.twitter.com/GreyNoiseIO/status/986458691787517952

23 Apr 2018 22:13Current

0.4Low risk

Vulners AI Score0.4

EPSS0.99993

muhstik botnet drupal vulnerability cryptocurrency ddos exploits miners malware irc command and control netlab oracle weblogic server greynoise intelligence