Liron Segal
Researcher and contributing author
Liron Segal is a researcher and contributing author for F5 Labs.
Research by Liron Segal (12)
Article | Dec 19, 2018
Threat Actors Rapidly Adopt New ThinkPHP RCE Exploit to Spread IoT Malware and Deploy Remote Shells
Threat actors wasted no time jumping on this new exploit to launch new campaigns for reconnaissance, uploading back doors, and deploying variants of the Mirai botnet.
7 min read
Article | Oct 9, 2018
Abusing Googlebot Services to Deliver Crypto-Mining Malware
Seventeen years after the opportunity for abuse was made public, attackers are finding new ways to make use of this unpatched web crawler service.
7 min read
Article | Sep 4, 2018
Apache Struts 2 Vulnerability (CVE-2018-11776) Exploited in CroniX Crypto-Mining Campaign
Attackers are exploiting new vulnerabilities almost as quickly as they're being discovered.
7 min read
Article | Jul 6, 2018
New Jenkins Campaign Hides Malware, Kills Competing Crypto-Miners
Threat actors continue to find creative yet relatively unsophisticated ways to launch new campaigns to reap profits from crypto-mining operations.
8 min read
Article | Jun 23, 2018
New Struts 2 Campaign Compiles Its Own C# Downloader, Leverages a User Profile Page as Its C&C Server
Attackers continue to find new and creative ways to carry out malicious crypto-mining operations, employing multiple exploits in a single campaign.
8 min read
Article | Jun 21, 2018
New Campaign Targeting Apache Struts 2, WebLogic Deploys Malware Using VBScript
With the vast availability of new exploits and the competition for victims’ resources, the multi-exploit trend continues to be popular among attackers.
3 min read
Article | Jan 3, 2018
New Python-Based Crypto-Miner Botnet Flying Under the Radar
A new Python-based botnet that mines Monero spreads via SSH and leverages Pastebin to publish new C&C server addresses.
9 min read
Article | Dec 15, 2017
Zealot: New Apache Struts Campaign Uses EternalBlue and EternalSynergy to Mine Monero on Internal Networks
New Apache Struts campaign, Zealot, targets vulnerabilities in Windows, Linux, and the DotNetNuke CMS, then leverages leaked NSA exploits to move laterally through internal networks and mine Monero.
11 min read
Article | Sep 1, 2017
Wirex Android DDoS Malware Adds UDP Flood
As quickly as attackers commandeer IoT devices to build more “thingbots,” they continue to evolve their attack types and functionality.
4 min read
Article | Nov 15, 2016
Old Protocols, New Exploits: LDAP Unwittingly Serves DDoS Amplification Attacks
A new DDoS attack vector that leverages LDAP for reflection-amplification attacks is seeing increased usage.
5 min read
Results 1-10 of 12
Stay up to date with F5 Labs
Get the latest threat intelligence and research delivered to your inbox.