Malware1 associated actor2 associated CVEs

Jasmin

Tracked since Jul 10, 2026 · Updated 4 months ago

Trending this weekNot trendingOutside this week’s top 100

Mention activity · 30 daysNo mention activity in the last 30 days.

Vulns2Associated

Actors1Associated

ATT&CK0Techniques

IOCs0Tracked

Is this in your environment?See whether this family's indicators match your telemetry and which of your assets are exposed to the CVEs associated with it.

Check your exposure

Associated CVEs

Associated vulnerabilities

2 CVEs Mallory has correlated with this family across public research and vendor advisories. Each card links to the full Mallory page for that vulnerability.

CVE-2024-27198via cyfirma blogExploited in the wildAuthentication bypass and remote code execution in JetBrains TeamCityCVE-2024-27198 is a critical authentication bypass vulnerability identified within the web component of JetBrains TeamCity versions before 2023.11.4. This vulnerability enables remote unauthenticated attackers to circumvent authentication checks by crafting specific URLs. | CVE-2024-27198 in JetBrains TeamCity has been actively exploited by threat actors to deliver Jasmin ransomware and create unauthorized user accounts.View vulnerability →Source ↗

CVE-2024-27199via zeropath blogPath traversal authentication bypass in JetBrains TeamCityThe BianLian ransomware group was observed by GuidePoint Security exploiting CVE-2024-27198 and CVE-2024-27199 to deliver malware including Jasmin ransomware.View vulnerability →Source ↗

Threat actors

Associated threat actors

1 distinct threat actor Mallory has associated with this family across public reporting. Open in Mallory to see the full evidence chain and overlapping campaigns.

View more details →

BianLian

The BianLian ransomware group was observed by GuidePoint Security exploiting CVE-2024-27198 and CVE-2024-27199 to deliver malware including Jasmin ransomware.

via zeropath blogzeropath.com

Activity feed

Recent activity

4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.

View more in app →

zeropath blogNews · May 29, 2026Brief Summary: JetBrains IntelliJ IDEA CVE-2026-49366 Command Injection via Filename Completion - ZeroPath Blog | ZeroPathRansomware mentioned as a payload delivered via exploited JetBrains TeamCity vulnerabilities.Read more ↗zeropath blogNews · May 29, 2026Quick Look: CVE-2026-49372 - Unauthenticated SSRF in JetBrains TeamCity Build Status - ZeroPath Blog | ZeroPathRansomware deployed following exploitation of TeamCity vulnerabilities.Read more ↗cyfirma blogNews · Apr 3, 2024Vulnerability Analysis and Exploitation : Understanding CVE-2024-27198 in JetBrains TeamCity - CYFIRMARansomware reported as being delivered through exploitation of the TeamCity authentication-bypass vulnerability CVE-2024-27198. The report does not describe its encryption implementation or other technical capabilities.Read more ↗trend micro researchNews · Mar 19, 2024TeamCity Vulnerability Exploits Lead to Jasmin Ransomware, Other Malware Types | Trend Micro (US)Named in a detection query for ransomware file encryption involving abc.exe and files with the .lsoc extension. The excerpt provides no further description of its deployment.Read more ↗

Is this in your environment?See whether this family's indicators match your telemetry and which of your assets are exposed to the CVEs associated with it.

Check your exposure

Mallory platform

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets match these IOCs, which detections are missing, which campaigns to expect next, and what to do in the next 30 minutes.

Start Free Trial Open in App ↗

IOC matchingMatch every observed IP, domain, and hash against your live telemetry.

Associated threat actors1Groups linked to this family, with evidence pinned to each claim.

Associated vulnerabilities2CVEs linked to this family, with the reporting behind each link.

Detection signaturesYARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

MITRE ATT&CK mappingEvery documented technique, ranked by evidence weight.

Researcher chatterReddit, Mastodon, and CTI community discussion around this family.

Malware1 associated actor2 associated CVEs

Jasmin

Tracked since Jul 10, 2026 · Updated 4 months ago

Trending this weekNot trendingOutside this week’s top 100

Mention activity · 30 daysNo mention activity in the last 30 days.

Vulns2Associated

Actors1Associated

ATT&CK0Techniques

IOCs0Tracked

Is this in your environment?See whether this family's indicators match your telemetry and which of your assets are exposed to the CVEs associated with it.

Check your exposure

Associated CVEs

Associated vulnerabilities

2 CVEs Mallory has correlated with this family across public research and vendor advisories. Each card links to the full Mallory page for that vulnerability.

Threat actors

Associated threat actors

1 distinct threat actor Mallory has associated with this family across public reporting. Open in Mallory to see the full evidence chain and overlapping campaigns.

View more details →

BianLian

The BianLian ransomware group was observed by GuidePoint Security exploiting CVE-2024-27198 and CVE-2024-27199 to deliver malware including Jasmin ransomware.

via zeropath blogzeropath.com

Activity feed

Recent activity

4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.

View more in app →

Is this in your environment?See whether this family's indicators match your telemetry and which of your assets are exposed to the CVEs associated with it.

Check your exposure

Mallory platform

The version that knows your environment.

Start Free Trial Open in App ↗

IOC matchingMatch every observed IP, domain, and hash against your live telemetry.

Associated threat actors1Groups linked to this family, with evidence pinned to each claim.

Associated vulnerabilities2CVEs linked to this family, with the reporting behind each link.

Detection signaturesYARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

MITRE ATT&CK mappingEvery documented technique, ranked by evidence weight.

Researcher chatterReddit, Mastodon, and CTI community discussion around this family.