OpenSSL

Reported Context (3)

to scan websites for specific flaws. The hackers have used the scripts against services including OpenSSL, Oracle WebLogic Server, Rejetto HFS, WordPress, Juniper ScreenOS, Jenkins, and Apache Struts. FBI Says China-Linked Hackers Stole Emails and Gave Third Parties Access
a combination of 4,096-bit RSA and 256-bit AES in counter (CTR) mode. The encryption code leverages the OpenSSL library, which is statically linked. Each file is encrypted with a pseudorandom key and nonce. The format Payouts King Ransomware Uses Evasion Techniques and RSA-AES Encryption
Legacy Web Server Stack: The server administrator installed outdated software versions of Apache Web Server (Win32), OpenSSL, and PHP. Researchers Track Suspected Kimsuky Infrastructure Using “Million OK!!!!” Response and Naver Branding

Malware (4)

People (1)

Threat Actors (6)

MITRE ATT&CK (7)

Vendors (2)

Products (18)

Tools (9)

Industries (7)

Countries (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.