Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
XZ Backdoor: How to check if your systems are affected?
Excerpt
XZ Backdoor: How to check if your systems are affected A principal software engineer at Microsoft by the name of Andres Freund accidentally stumbled upon a backdoor within XZ, the popular compression library. This discovery happened because he noticed both a 500ms delay for ssh as well as the sshd processes using a surprising amount of CPU, despite immediately failing because of wrong usernames etc. He researched this and on March 29th, 2024 posted his findings on…
Read the original report →Attack Flow7 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2024-3094 | Medium | Score 53/100 | First seen |
| MD5 | 223949d5a074ebc3dce9ee78baad9e27 | Medium | Score 53/100 | First seen |
| SHA1 | 328c52da8a2bbb81307644efdb58db2c422d9ba7 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…