Metasploit Meterpreter Installed via Redis Server

AhnLab SEcurity intelligence Center (ASEC) recently discovered that the Metasploit Meterpreter backdoor has been installed via the Redis service. Redis is an abbreviation of Remote Dictionary Server, which is an open-source in-memory data structure storage that is also used as a database. It is presumed that the threat actors abused inappropriate settings or ran commands through vulnerability attacks.

Redis is used for various purposes with the main ones being session management, message broker, and queues. As many systems all over …

ahnlab asec backdoor center data database intelligence malware analysis memory metasploit meterpreter redis security security intelligence server service settings storage structure threat threat actors