CISA and FBI Release Known IOCs Associated with Androxgh0st Malware

Summary:

The Cybersecurity Advisory (CSA) released by CISA and FBI highlights the known indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with Androxgh0st malware. The malware establishes a botnet to identify and exploit vulnerable networks, targeting files with confidential information such as credentials for high-profile applications. Threat actors have been observed exploiting specific vulnerabilities, including CVE-2017-9841, CVE-2021-41773, and CVE-2018-15133. To mitigate the risk, CISA urges organizations to review and implement the mitigations provided in the joint CSA to reduce the likelihood and impact of cybersecurity incidents.