New Mirai Variant Targets WebSVN

Security Alert
Published August 31, 2021

New Mirai Variant Targets WebSVN Command Injection Vulnerability (CVE-2021-32305)

A critical command injection vulnerability affecting WebSVN, an open-source web application for browsing source code, has been exploited in the wild to deploy variants of the Mirai DDoS malware.

MALWARE FAMILY:
Mirai
ATT&CK IDS:
T1027 – Obfuscated Files or InformationT1499 – Endpoint Denial of ServiceT1018 – Remote System DiscoveryT1110 – Brute ForceT1059 – Command and Scripting InterpreterT1210 – Exploitation of Remote ServicesT1094 – Custom Command and Control Protocol

Related Content

Ready to Simplify IT Management?

We will work with you to create a plan that meets your business needs, while helping you get more from your technology, with less work, and less worry about making it all run right.