CyberSIXT Search
Original
Image: SecurityOnline

SecurityOnlineDdos

CVE-2024-21182 Fuels SilentCryptoMiner Attack on Streaming Sites

Part of the CVE-2024-21182 story · 9 articles · 6 outlets · since 1 Jun

A critical exploit has been detected, specifically CVE-2024-21182 affecting Oracle WebLogic Server. A new variant of the SilentCryptoMiner malware is being deployed across popular digital entertainment platforms, leading to severe degradation of user systems. This malware uses deceptive alerts to deliver its payload, hiding within pirated content hubs and exploiting fake update prompts. The attack employs a sophisticated infection chain, utilizing memory manipulation techniques to execute malicious code undetected.

Upon successful installation, the malware can escalate privileges to disable security measures, continuously monitor system integrity, and communicate with remote operators. Organizations are advised to monitor for unusual behavior and implement strict digital hygiene protocols to counteract this threat.

Story timeline CVE-2024-21182

Full timeline

Sources

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device