DreamBus Unleashes Metabase Mayhem With New Exploit Module

Introduction

Zscaler’s ThreatLabz research team has been tracking the Linux-based malware family known as DreamBus. Not much has changed in the last few years other than minor bug fixes, and slight modifications to evade detection from security software. However, in the last 6 months, the threat actor operating DreamBus has introduced two new modules to target vulnerabilities in Metabase and Apache RocketMQ. This is likely in response to a decrease in new infections stemming from exploits utilized by DreamBus, many …

actor bug detection evade exploit family fixes introduction linux malware modifications research security security software software team threat threat actor threatlabz tracking zscaler