Holy See Unknown Analysis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (6)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en	6

Country

it	4
de	2

Actors

Unknown	1

Activities

Interest

Timeline

Type

Connectivity Software	2
Not Defined	2
Router Operating System	2

Vendor

OpenSSH	2
D-Link	2
TP-LINK	2

Product

OpenSSH SSH	2
D-Link DSL-2740B	2
TP-LINK TL-WR841N	2

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	EPSS	CTI	CVE
1	OpenSSH auth-options.c credentials management	9.1	7.9	$0-$5k	$0-$5k	Unproven	Official Fix	0.00285	0.05	CVE-2012-0814
2	TP-LINK TL-WR841N Firmware path traversal	7.5	7.5	$0-$5k	$0-$5k	High	Not Defined	0.02952	0.04	CVE-2012-5687
3	D-Link DSL-2740B Authentication login.cgi access control	9.8	9.6	$5k-$25k	$0-$5k	High	Workaround	0.01193	0.00	CVE-2013-2271
4	Palo Alto PAN-OS Zone Protection IP Spoofing Check privileges management	5.3	4.8	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00000	0.04
5	ownCloud improper authentication	4.3	4.1	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00159	0.00	CVE-2014-9043
6	Oracle Communications Unified Calendar Server information disclosure	4.0	3.8	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00043	0.00	CVE-2011-3570

IOC - Indicator of Compromise (11)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP address	Actor	Identified	Type	Confidence
1	57.79.216.0	Holy See Unknown	03/22/2023	verified	High
2	81.208.94.0	Holy See Unknown	03/22/2023	verified	High
3	185.17.220.0	Holy See Unknown	03/22/2023	verified	High
4	XXX.XXX.XX.X	Xxxx Xxx Xxxxxxx	03/22/2023	verified	High
5	XXX.XX.XXX.X	Xxxx Xxx Xxxxxxx	03/22/2023	verified	High
6	XXX.XX.XXX.X	Xxxx Xxx Xxxxxxx	03/22/2023	verified	High
7	XXX.XX.X.X	Xxxx Xxx Xxxxxxx	03/22/2023	verified	High
8	XXX.XX.XX.X	Xxxx Xxx Xxxxxxx	03/22/2023	verified	High
9	XXX.XX.XX.X	Xxxx Xxx Xxxxxxx	03/22/2023	verified	High
10	XXX.XX.XX.X	Xxxx Xxx Xxxxxxx	03/22/2023	verified	High
11	XXX.XX.XX.X	Xxxx Xxx Xxxxxxx	03/22/2023	verified	High

TTP - Tactics, Techniques, Procedures (3)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Class	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CAPEC-126	CWE-22	Path Traversal	predictive	High
2	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
3	TXXXX	CAPEC-	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	High

IOA - Indicator of Attack (3)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	auth-options.c	predictive	High
2	File	xxxxx.xxx	predictive	Medium
3	Network Port	xxx xxxxxx xxxx	predictive	High

References (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!