Red Securium

    Vulnerabilities within web applications and information stealing malware were leveraged to perform the attack. One vulnerability that was exploited in the attack was related to privilege escalation - CVE-2018-1038, also known as TotalMeltdown. According to a recent report from the Australian Cyber Security Center (ACSC), eight Australian web hosting providers were compromised in a malware attack in 2018. Vulnerabilities within web applications and information stealing malware were leveraged to perform the attack - which was dubbed as 'Manic Menagerie' by the ACSC. Attack method It was revealed that hackers abused the flaws with web applications to get root access to web servers. Upon gaining access, they installed a malware - that included both password stealing tools and the Gh0st remote access tool (RAT). Further analysis revealed that the attackers used a web browser to manually interact with the targeted websites and find the vulnerabilities. Once id