‘Magnet Goblin’ Exploits Ivanti 1-Day Bug in Mere Hours

March 12, 2024 at 04:11PM Threat actors targeted Ivanti edge devices earlier this year. One-day exploit CVE-2024-21887 in Ivanti Connect Secure and Policy Secure gateways, rated 9.1/10, was quickly capitalized on by “Magnet Goblin.” Known for exploiting one-days in public-facing services, this group deploys malware capable of flying under the radar, emphasizing the need for … Read more

Magnet Goblin Delivers Linux Malware Using One-Day Vulnerabilities

March 11, 2024 at 08:09AM Check Point reports that the financially motivated threat actor, Magnet Goblin, has been exploiting one-day vulnerabilities in public-facing services to deploy Linux backdoors. The actor targeted various vulnerabilities, including in Ivanti VPNs, Magento, and Qlik Sense. Check Point warns of ongoing trends for threat actors to target under-protected areas. Based … Read more

Magnet Goblin Hacker Group Leveraging 1-Day Exploits to Deploy Nerbian RAT

March 11, 2024 at 02:45AM Magnet Goblin, a financially motivated threat actor, rapidly exploits newly disclosed vulnerabilities to breach public-facing servers and edge devices. The group deploys malware, including a remote access trojan (RAT) called Nerbian and MiniNerbian, to execute arbitrary commands and steal credentials. Their campaigns are financially motivated and target areas previously left … Read more

Magnet Goblin hackers use 1-day flaws to drop custom Linux malware

March 10, 2024 at 11:42AM Magnet Goblin, a financially motivated hacking group, exploits 1-day vulnerabilities to breach public-facing servers and deploy custom malware on Windows and Linux systems. They target devices and services like Ivanti Connect Secure, Apache ActiveMQ, ConnectWise ScreenConnect, Qlik Sense, and Magento. Check Point analysts emphasize the importance of timely patching and … Read more

Cybercrime crew Magnet Goblin bursts onto the scene exploiting Ivanti holes

March 8, 2024 at 06:01PM Cybercrime gang Magnet Goblin swiftly exploits vulnerabilities in Ivanti devices to breach networks of US organizations in the medical, manufacturing, and energy sectors. CISA confirms Ivanti attacks, urging organizations to review Ivanti advisory. Magnet Goblin deploys remote-control and data-stealing malware, leveraging one-day vulnerabilities, posing a significant threat to global digital … Read more