AquaSecurity_Kinsing_Demystified_Technical_Guide.pdf

A Comprehensive Technical Guide

2

03

04

07

07

31

46

Applications Kinsing Target (Vulnerabilities and Misconfigurations)22

Kinsing’s victims in the wild (OSINT)23

Table of Contents

32

32 Type I Scripts – comprehensive analysis

35 Type II Scripts – comprehensive analysis

37 Auxiliary scripts analysis

3

Executive summary

Kinsing first surfaced as a cybersecurity threat in 2019 and quickly became a widespread concern, attacking various applications globally. Despite extensive analysis by security professionals, little has changed, and as of 2024, new insights continue to emerge about the Kinsing operation, providing strategies for security teams to better mitigate associated risks. Since its initial appearance, Kinsing’s modus operandi has largely re…