Malware

MooBot

MITRE ATT&CK TTPs 4

T1059.001
PowerShell
Execution
 T1068
Exploitation for Privilege Escalation
Privilege Escalation
 T1133
External Remote Services
Persistence
 T1190
Exploit Public-Facing Application
Initial Access

Source Articles

Ubiquiti Patches Critical UniFi Flaws Across Connect, Talk, Access, Protect, and OS
Ubiquiti has patched multiple critical vulnerabilities across its UniFi product line, including UniFi Connect, Talk, Access, Protect, and OS. The flaws include command injection, SQL injection, SSRF, and improper access control issues that could allow privilege escalation and arbitrary command execution. While most vulnerabilities have not been observed in active exploitation, CISA has flagged three UniFi OS flaws as weaponized in real-world attacks. Additionally, Russian state-sponsored actors have previously used compromised Ubiquiti devices in the MooBot botnet.
hacker-news ·2w ago