SecurityOnlineDdos
CVE-2024-21182 Fuels SilentCryptoMiner Attack on Streaming Sites
A critical exploit has been detected, specifically CVE-2024-21182 affecting Oracle WebLogic Server. A new variant of the SilentCryptoMiner malware is being deployed across popular digital entertainment platforms, leading to severe degradation of user systems. This malware uses deceptive alerts to deliver its payload, hiding within pirated content hubs and exploiting fake update prompts. The attack employs a sophisticated infection chain, utilizing memory manipulation techniques to execute malicious code undetected.
Upon successful installation, the malware can escalate privileges to disable security measures, continuously monitor system integrity, and communicate with remote operators. Organizations are advised to monitor for unusual behavior and implement strict digital hygiene protocols to counteract this threat.
Story timeline CVE-2024-21182
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 1 Jun · 18:41 UTC | CISA | CISA flags Oracle WebLogic CVE-2024-21182 as actively exploited |
| Mon 1 Jun · 20:24 UTC | CISA | CISA Puts Oracle WebLogic Flaw CVE‑2024‑21182 on KEV List |
| Tue 2 Jun · 02:21 UTC | CISA | CISA’s KEV Catalog Helps Firms Tackle Oracle WebLogic Risk |
| Tue 2 Jun · 05:21 UTC | SecurityOnline | The Shai-Hulud Infiltration: Red Hat Exploited in Sovereign Supply Chain Breach |
| Tue 2 Jun · 07:32 UTC | SecurityOnline | Grandoreiro Banking Trojan Evades Defense via Lookalike Software |
| Tue 2 Jun · 10:32 UTC | SecurityOnline | CVE-2024-21182 Fuels SilentCryptoMiner Attack on Streaming Sites (this article) |
| Tue 2 Jun · 12:21 UTC | SecurityWeek | CISA Alerts to Active Exploits of Unpatched Oracle WebLogic Flaw |
| Tue 2 Jun · 16:32 UTC | Security Affairs | CISA adds Oracle WebLogic flaw CVE-2024-21182 to exploited list |
| Tue 2 Jun · 19:00 UTC | The Hacker News | Oracle WebLogic CVE-2024-21182 added to KEV amid active exploits |