HiddenWasp
Forum
  1. Forums
  2. Imunify360
  3. Imunify360 and Imunify Sensor
  1. Glenn Taylor
  2. Saturday, 01 June 2019
  3.  Subscribe via email
Just wondering if you guys are aware of HiddenWasp and if there's anything you can do to protect against it or at least detect it?

Apparently there is a couple of IP this attack comes from which I've permanently blocked but that will probably change soon:

103.206.122.245
103.206.123.13

Let me know what you know.

Thanks
G
Rate this post:
  1. 01.06.2019 19:06:44
  2. # 1
Sergey Khristich Accepted Answer
Posts: 75
Joined: 20.05.2019
0
Votes
Undo
Hello, Glenn
If you require any further information, let me know.
To help you with this question we need a little bit more information, please create a ticket here https://cloudlinux.zendesk.com/hc/en-us/requests/new and technical experts will help you asap.
If you have any other questions, feel free to ask here.
Thank you for contacting us.
  1. 01.06.2019 19:06:12
  2. # 2
Glenn Taylor Accepted Answer
Posts: 27
Joined: 23.04.2015
0
Votes
Undo
Hi Sergey, I don't need help. I just became aware of HiddenWasp and it's not affecting my systems as far as I know.

I was just wondering what CL knows about HiddenWasp.
  1. 03.06.2019 09:06:53
  2. # 3
Sergey Khristich Accepted Answer
Posts: 75
Joined: 20.05.2019
0
Votes
Undo
Hello, Glenn! We are working on this issue.
Get back to you later today with a response.
Thanks in advance!
  1. 03.06.2019 13:06:00
  2. # 4
Sergey Khristich Accepted Answer
Posts: 75
Joined: 20.05.2019
0
Votes
Undo
Glenn,
For now, all files in HiddenWasp's malware set are blacklisted, and in the next 24 hours hashlist updates will be delivered to clients.
To force the blackhash updates you can use the following command:
`# imunify360-agent update sigs --force`
Also, we 've made a signature for our AV scanner. It will be live in the nearest time.
As a side note: we haven't detected any part of this botnet on the servers secured by Imunify for the moment.
Thanks in advance!
  1. 03.06.2019 13:06:22
  2. # 5
Glenn Taylor Accepted Answer
Posts: 27
Joined: 23.04.2015
0
Votes
Undo
Thanks Sergey. Appreciate the update. Glad to see that you guys are on it!
  1. 05.06.2019 08:06:16
  2. # 6
Sergey Khristich Accepted Answer
Posts: 75
Joined: 20.05.2019
0
Votes
Undo
Hello, Glenn! Thank you.
Please let us know if you have any questions.
Thanks in advance!
  • Page :
  • 1


There are no replies made for this post yet.
Be one of the first to reply to this post!
Guest
Submit Your Response
Upload files or images for this discussion by clicking on the upload button below. Supports gif,jpg,png,zip,rar,pdf
• Insert • Remove Upload Files (Maximum File Size: 2 MB)
Captcha
To protect the site from bots and unauthorized scripts, we require that you enter the captcha codes below before posting your question.