Malicious Tag Roundup (Sep 2-13, 2021) | Cybersecurity Blog | Grey Noise
Summary: GreyNoise's tag roundup for September 2-13, 2021 added new tags for internet-wide scanning activity, including crawlers hunting MongoDB instances and legacy Apple iOS devices with remotely accessible lockdownd service. It also tagged malicious behavior such as HTTP request smuggling to bypass load balancer or proxy restrictions, checks for hosts infected with the Gh0st trojan, unobfuscated njRAT traffic, and exploitation attempts against CVE-2017-11610, a remote command execution flaw in Supervisor.
What's compelling: The same scanning infrastructure is simultaneously hunting exposed MongoDB instances, legacy iOS lockdownd services, and Supervisor servers vulnerable to CVE-2017-11610 - three unrelated exposures that a single attacker can find without targeting you specifically.
Read the original at GreyNoise Blog ↗
- Topics
- Detection & Response
- Mentions
- CVE-2017-11610CVE-2026-123158
- Related