DNSLock Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (11)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

fr	12

Country

us	12

Actors

DNSLock	1

Activities

Interest

Timeline

Type

Not Defined	10
Application Server Software	2

Vendor

SAP	8
Foxit	4

Product

SAP 3D Visual Enterprise Viewer	6
Foxit PhantomPDF	4
SAP NetWeaver Application Server ABAP	2

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	foreman-debug Log File Password credentials management	5.9	5.9	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00226	0.06	CVE-2016-9593
2	Netgear R6120/R6080/R6260/R6220/R6020/JNR3210/WNR2020 mini_httpd Service improper authentication	5.4	5.4	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00207	0.00	CVE-2020-17409
3	Foxit PhantomPDF U3D Object information disclosure	3.8	3.8	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00119	0.00	CVE-2020-17411
4	Foxit PhantomPDF U3D Object information disclosure	6.0	6.0	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00304	0.00	CVE-2020-17412
5	SAP Business Planning and Consolidation cross site scripting	4.4	4.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00054	0.00	CVE-2020-6368
6	SAP NetWeaver Application Server ABAP information disclosure	4.3	4.3	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00054	0.00	CVE-2020-6371
7	SAP 3D Visual Enterprise Viewer PDF File denial of service	6.0	6.0	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00081	0.00	CVE-2020-6372
8	SAP 3D Visual Enterprise Viewer PDF File denial of service	6.0	6.0	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00081	0.00	CVE-2020-6373
9	SAP 3D Visual Enterprise Viewer JT File denial of service	6.0	6.0	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00081	0.00	CVE-2020-6374
10	SAP 3D Visual Enterprise Viewer CGM File denial of service	4.9	4.9	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00061	0.00	CVE-2020-6375
11	SAP 3D Visual Enterprise Viewer RH File denial of service	4.5	4.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00061	0.00	CVE-2020-6376

IOC - Indicator of Compromise (6)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Hostname	Actor	Identified	Type	Confidence
1	18.220.249.233	ec2-18-220-249-233.us-east-2.compute.amazonaws.com	DNSLock	04/08/2022	verified	Medium
2	52.77.199.193	ec2-52-77-199-193.ap-southeast-1.compute.amazonaws.com	DNSLock	04/08/2022	verified	Medium
3	XX.XXX.XXX.XX	xxx-xx-xxx-xxx-xx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx	04/08/2022	verified	Medium
4	XX.XXX.XXX.XXX	xxx-xx-xxx-xxx-xxx.xxxxxxx-x.xxxxxxxxx.xxx	Xxxxxxx	04/08/2022	verified	Medium
5	XX.XXX.XX.XX		Xxxxxxx	04/08/2022	verified	High
6	XX.XXX.XXX.XXX		Xxxxxxx	04/08/2022	verified	High

TTP - Tactics, Techniques, Procedures (3)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1059.007	CAPEC-209	CWE-79	Cross Site Scripting	predictive	High
2	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
3	TXXXX	CAPEC-116	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	High

References (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Might our Artificial Intelligence support you?

Check our Alexa App!