Decoding Water Sigbin's Latest Obfuscation Tricks

Water Sigbin (aka the 8220 Gang) exploited the Oracle WebLogic vulnerabilities CVE-2017-3506 and CVE-2023-21839 to deploy a cryptocurrency miner using a PowerShell script. The threat actor also adopted new techniques to conceal its activities, making attacks harder to defend against.

Article Link: Decoding the 8220 Gang’s Latest Obfuscation Tricks | Trend Micro (US)

1 post - 1 participant

Read full topic

8220 gang actor article attacks conceal cryptocurrency cryptocurrency miner cve cve-2023-21839 decoding deploy exploited gang latest link making micro miner obfuscation oracle oracle weblogic powershell powershell script script techniques threat threat actor trend trend micro tricks vulnerabilities water weblogic