{"uuid": "1c058066-5876-4ce7-ab7d-5abc037d9a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-20273", "type": "exploited", "source": "https://t.me/hacking_Attack/124050", "content": "conceal their presence. The root cause of the drop in infections was the attackers\u2019 endeavor to obscure their implants, following the exploitation of CVE-2023-20198.\n\ud83d\udca5\ud83d\udca5 #Cisco #CVE #CVE-2023-20198 update: something happened today.\n\nWe went down from 40k host with an implant to 1.2k.\n\nWe still have roughly the same number of reachable Cisco devices (~60k), but most of them do not show the Talos discovered implant remotely as before. https://t.co/ogetwLLfE6 pic.twitter.com/pWxKRpWr5V\n\n\u2014 ONYPHE (@onyphe) October 21, 2023\nUPDATE: Improved Cisco IOS XE Web UI CVE-2023-20198 implant detection, after threat actor modified their compromised device config (hat tip to @foxit)\n\n30,487 unique IPs on 2023-10-23\n\nLatest data in tonight's compromised website report.  Dashboard stats updated after end of day. pic.twitter.com/7SjqduAaGA\n\n\u2014 Shadowserver (@Shadowserver) October 23, 2023\nBased on our latest check, 320 implants remaining \u2026 Tuesday 10/17: 34 552 ;\nWednesday 10/18: 36 965 ; \nThursday 10/19 4pm CET (cleaning step began): 31 220 \nToday 10/22 5pm CET: 320#CVE-2023-20198 #CVE-2023-20273 #somethingishappening pic.twitter.com/mh1ugFAfOf\n\n\u2014 CERT Orange Cyberdefense (@CERTCyberdef) October 22, 2023\nAs of now, the identities of the threat actors behind these attacks remain undisclosed, adding an extra layer of mystery to this unfolding cybersecurity saga.\nTrending: Cisco\u2019s IOS XE Vulnerability Allows Complete Takeover, actively exploited\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: securityaffairs.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-3-300x150.png Chrome\u2019s Innovative \u201cIP Protection\u201d Feature Unveiled, Masking Users\u2019 IP Addresses\nOctober 23, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-2-300x150.png BlackCat Ransomware Uses \u2018Munchkin\u2019: A Stealthy New Tool to Target Network Devices\nOctober 20, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-1-300x150.png Microsoft Warns of North Korean Hacking Groups Exploiting TeamCity Vulnerability\nOctober 19, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-32-300x150.png D-Link Responds to Data Breach: Employee Falls Victim to Phishing Attack\nOctober 18, 2023 https://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking Course\n\nBegin the learning curve of hacking now! https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Solutions.png Information Security Solutions\n\nFind out how Pentesting Services can help you.\nThe post Cisco Warns For A Second Zero-Day in IOS XE Exploited for Device Infections first appeared on Black Hat Ethical Hacking.", "creation_timestamp": "2026-09-05T01:00:43.878338Z"}