[Intel]: https://www.crowdstrike.com/blog/prophet-spider-exploits-oracle-weblogic-to-facilitate-ransomware-activity/

[timb-machine]

Area

Malware reports

Parent threat

Initial Access, Persistence, Impact

Finding

https://www.crowdstrike.com/blog/prophet-spider-exploits-oracle-weblogic-to-facilitate-ransomware-activity/

Industry reference

attack:T1190:Exploit Public-Facing Application
attack:T1505.003:Web Shell

Malware reference

No response

Actor reference

Prophet Spider

Component

Linux

Scenario

No response