IPs exploiting #ConnectAround to RCE
https://viz.greynoise.io/query/?gnql=last_seen%3A1d%20AND%20spoofable%3Afalse%20AND%20%28tags%3A%22Ivanti%20Connect%20Secure%20%28ICS%29%20RCE%20Attempt%22%29
#threatintel
Kevin Beaumont /
npub176…fkwlw
2024-01-19 23:18:07
in reply to nevent1q…jcy4
Author Public Key
npub176rs4lx7gjqwepgg75psfpv7zjj3xz0lyj4n7rux93ftm390sars6fkwlwPublished at
2024-01-19 23:18:07Event JSON
{
"id": "f16528e0b7330a64517116aa711a97ef1121d6846b7684a793ab86fe64f1737e",
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747",
"created_at": 1705706287,
"kind": 1,
"tags": [
[
"e",
"ca843f7c4189084af292d226ddf683c6f9f9b61f392ed24b5c20f759c901d743",
"wss://relay.mostr.pub",
"reply"
],
[
"t",
"connectaround"
],
[
"t",
"threatintel"
],
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/111785167284753041",
"activitypub"
]
],
"content": "IPs exploiting #ConnectAround to RCE \n\nhttps://viz.greynoise.io/query/?gnql=last_seen%3A1d%20AND%20spoofable%3Afalse%20AND%20%28tags%3A%22Ivanti%20Connect%20Secure%20%28ICS%29%20RCE%20Attempt%22%29\n\n#threatintel",
"sig": "a781ed042ce2c5ca91fb33dfdfd259ef8b483a38c86ef2ea0420c32f62d9ce1c656cb1f3a30183432c65c970b4ec92c5a4665926726a91d3f3f25b71992fc9a9"
}