PlagueMalware
According to Nexttron Systems, this is an implant built as a malicious PAM (Pluggable Authentication Module), enabling attackers to silently bypass system authentication and gain persistent SSH access.From MISP Galaxy
Last reported 11 months ago, by Huntress2 reports
ATT&CK techniques
3 techniques · each with the sentence it comes from- T1021.001Remote Desktop Protocol
“…nd to come from the university or school district itself and aim to compromise accounts or steal credentials; targeting exposed Remote Desktop Protocol (RDP) services in order to gain initial access to the environment and manually deploy ransomware; or other techniques.”
- T1110Brute Force
“An RDP brute force attack”
- T1684Social Engineering
“Ransomware is like a viral pathogen, and social engineering, such as phishing, is a vector for its transmission.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
2 reports, newest first · the exact sentence from each-
Threats Plague Educational Organizations“Threats Plague Educational Organizations”
-
Healthcare Held Hostage: Fighting the Plague of Ransomware“Healthcare Held Hostage: Fighting the Plague of Ransomware”
Thanks — we review every report.