
Cybersecurity researchers recently uncovered a sophisticated attack campaign orchestrated by the Water Sigbin threat actor, which is also known as the 8220 Gang. The attackers exploited several vulnerabilities in Oracle WebLogic Server, notably CVE-2017-3506 and CVE-2023-21839, to deploy the XMRig cryptocurrency miner on compromised systems. This attack stands out due to its multi-stage process, advanced evasion tactics, and intricate use










