Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
CrushFTP CVE-2025-31161 Auth Bypass and Post-Exploitation
Excerpt
Huntress observed in-the-wild exploitation of CVE-2025-31161, an authentication bypass vulnerability in versions of CrushFTP and further post-exploitation leveraging MeshCentral and other malware.
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2025-31161 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…