fastjson2

Reported Context (1)

The host also carried a fastjson2 deserialization RCE kit and a full ProjectDiscovery-style reconnaissance suite driven from a multi-million-host FOFA corpus. The fastjson2 activity was reconnaissance only: across a CloudSEK Finds AI-Agent-Driven Campaign Behind 12,000 WordPress Backdoors and Crypto Theft

MITRE ATT&CK (9)

Vendors (2)

Products (10)

Tools (12)

Industries (4)

Countries (10)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.