Known Indicators of Compromise Associated with Androxgh0st Malware

News Cybersecurity English Guidance

Date: 16th Jan, 2024 Source: Cybersecurity and Infrastructure Security Agency Country: USA Original Source

Brief

Summary:

The FBI and CISA recommend implementing various mitigations to enhance cybersecurity posture and reduce the risk of compromise by Androxgh0st malware actors. These measures include:

Keeping software and firmware up-to-date
Patching exploited vulnerabilities
Securing default URI settings
Ensuring Laravel applications are not in debug mode
Removing cloud credentials from.env files
Reviewing platform credentials for unauthorized access
Scanning for unknown PHP files
Analyzing outgoing HTTP requests to file hosting sites

Additionally, the agencies advise validating an organization's security program against the MITRE ATT&CK for Enterprise framework to ensure alignment with threat behaviors and effective security technology performance.

SUMMARY The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are releasing this joint Cybersecurity Advisory (CSA) to disseminate known indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with threat actors deploying Androxgh0st malware. Multiple, ongoing investigations and trusted third party reporting yielded the IOCs and TTPs

This content is restricted.

Highlights content goes here...

This content is restricted.

Cybersecurity and Infrastructure Security Agency

RADA.AI

Hello! I'm RADA.AI - Regulatory Analysis and Decision Assistance. Your Intelligent guide for compliance and decision-making. How can i assist you today?

Suggested

Known Indicators of Compromise Associated with Androxgh0st Malware

Brief

Cybersecurity and Infrastructure Security Agency

Form successfully submitted. One of our GRI rep will contact you shortly

Thanking You!

Enter your Email

Verify Email

Tell us more about yourself

Select your work area

Select your country

All set.

Known Indicators of Compromise Associated with Androxgh0st Malware

Brief

Cybersecurity and Infrastructure Security Agency

Form successfully submitted. One of our GRI rep will contact you shortly

Thanking You!

Enter your Email

Verify OTP

Enter your Email

Verify Email

Tell us more about yourself

Select your work area

Select your country

All set.