Attributed metadata history
Up to 100 retained publisher events per page for 17e8f2ea154a2f5de83eb77d8b0bdeea342fde321562e00b14f76eb5012955e1. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_4a349ec95eeb880450
observed · 2026-10-12 09:41:03 UTC
Key Takeaways An audio version of this report can be found on Spotify, Apple, YouTube, Audible, & Amazon.  This intrusion began in mid-February 2024 after a threat actor exploited a vulnerability (CVE-2023-46604) on an exposed Apache ActiveMQ server. The threat actor was able to perform remote code execution (RCE) by using a Java Spring class and a custom Java Spring […] The post Apache ActiveMQ Exploit Leads to LockBit Ransomware appeared first on The DFIR Report.
Fingerprint: 5c3889c23713ec72261a7287d1c34ed9a3ff82b1af5b0d3450fcbe4d5d4880a1
intelligence_src_4a349ec95eeb880450
observed · 2026-10-12 09:41:03 UTC
available
Fingerprint: f7722c11597a8a71105e684b97a9970034dcfc15830c1a0fd7d73286b578f1c9