CVE-2022-24934Vulnerability
Reported by 1 independent source · first reported by Sekoia.io · last reported
Last reported 10 days ago
What the reports say
1 report, newest first · the exact sentence from each-
Sekoia Honeypot Captures an Attack on GenAI Infrastructure“…ained initial access via phishing emails carrying an infected installer and by exploiting a vulnerability in the WPS Office updater (CVE-2022-24934), then deployed a modular backdoor toolset for persistence and privilege escalation.”
Indicators reported together
named in the same reports- hxxp://154.217.251[.]226:19999/flowise-hbin 1 report
- 154.217.251[.]226in 1 report
- 98br[.]orgin 1 report
- 98br[.]gamein 1 report
- gr99[.]topin 1 report
- 11kk[.]coin 1 report
Copy these 6 indicators · defanged
Also named with it: CVE-2025-59528, CVE-2026-41264, CVE-2024-31621
Thanks — we review every report.