Loading malware…
14 CVEs Mallory has correlated with this family across public research and vendor advisories. Each card links to the full Mallory page for that vulnerability.
2 more CVEs associated with this family tracked in Mallory.
5 distinct techniques documented for this family, organized by ATT&CK tactic.
Unit 42 researchers observed attempts to exploit CVE-2020-25213, which is a file upload vulnerability in the WordPress File Manager plugin. Successful exploitation of this vulnerability allows an attacker to upload an arbitrary file with arbitrary names and extensions, leading to Remote Code Execution (RCE) on the targeted web server.
When exploited, this vulnerability leads to remote code execution (RCE), which Kinsing uses to download and install malware.
We uncovered the active exploitation of the Apache ActiveMQ vulnerability CVE-2023-46604 to download and infect Linux systems with the Kinsing malware... When exploited, this vulnerability leads to remote code execution (RCE), which Kinsing uses to download and install malware.
We uncovered the active exploitation of the Apache ActiveMQ vulnerability CVE-2023-46604 to download and infect Linux systems with the Kinsing malware... which Kinsing uses to download and install malware.
Kinsing ... runs a malicious cryptominer from the H2miner family... its ultimate purpose is to be used in cryptojacking attacks on container environments.
22 indicators attributed across vendor reports, sandbox runs, and researcher write-ups. Values are masked here and available in full in Mallory.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.