{"metadata": {"vulnerability": "CVE-2021-26855", "count": 916, "kinds": {"milestone": 8, "sighting": 865, "kev": 17, "other": 26}}, "data": [{"timestamp": "2021-02-08T00:00:00Z", "date_only": false, "value": "2021-02-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-26855", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-03-01T00:00:00Z", "date_only": false, "value": "2021-03-01T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-26855", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2021-03-01T00:00:00Z", "date_only": false, "value": "2021-03-01T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-26855", "record": "FKIE_CVE-2021-26855", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2021-03-02T00:00:00Z", "date_only": true, "value": "2021-03-02", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-004", "record": "CERTFR-2021-ALE-004", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2021-03-02T16:00:00Z", "date_only": false, "value": "2021-03-02T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2021-26855", "field": "containers.cna.datePublic"}, {"timestamp": "2021-03-02T23:55:26Z", "date_only": false, "value": "2021-03-02T23:55:26.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-26855", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-03-03T00:00:00Z", "date_only": false, "value": "2021-03-03T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-156", "record": "CERTFR-2021-AVI-156", "field": "last_revision_date"}, {"timestamp": "2021-03-03T00:00:00Z", "date_only": false, "value": "2021-03-03T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-004", "record": "CERTFR-2021-ALE-004", "field": "initial_release_date"}, {"timestamp": "2021-03-03T00:00:00Z", "date_only": false, "value": "2021-03-03T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-156", "record": "CERTFR-2021-AVI-156", "field": "initial_release_date"}, {"timestamp": "2021-03-03T00:00:00Z", "date_only": false, "value": "2021-03-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-004", "record": "CERTFR-2021-ALE-004", "field": "revisions.0.revision_date"}, {"timestamp": "2021-03-03T00:00:00Z", "date_only": false, "value": "2021-03-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-156", "record": "CERTFR-2021-AVI-156", "field": "revisions.0.revision_date"}, {"timestamp": "2021-03-03T00:00:00Z", "date_only": true, "value": "2021-03-03", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-14813", "record": "CNVD-2021-14813", "field": "submitTime"}, {"timestamp": "2021-03-03T00:15:00Z", "date_only": false, "value": "2021-03-03T00:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6784-2MH5-CQ56", "record": "GHSA-6784-2MH5-CQ56", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-03-03T00:15:12.103Z", "date_only": false, "value": "2021-03-03T00:15:12.103", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-26855", "record": "FKIE_CVE-2021-26855", "field": "published"}, {"timestamp": "2021-03-03T00:15:12.103Z", "date_only": false, "value": "2021-03-03T00:15:12.103", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2021-26855", "record": "GSD-2021-26855", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2021-03-03T02:44:45Z", "date_only": false, "value": "2021-03-03T02:44:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/24377", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "32e37da1-0c37-40a4-a809-e2bae1b7a68b", "content": "\u203c CVE-2021-26854 \u203c\n\nMicrosoft Exchange Server Remote Code Execution Vulnerability This CVE ID is unique from CVE-2021-26412, CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065, CVE-2021-27078.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/24377"}, {"timestamp": "2021-03-03T04:00:00Z", "date_only": false, "value": "2021-03-03T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=556", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9d30caf5-6d92-4119-a931-41b2a46d4c67", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=556"}, {"timestamp": "2021-03-03T06:30:17Z", "date_only": false, "value": "2021-03-03T06:30:17.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/76591c3b-efb3-4084-a644-87a6cca8c784", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "032a6d5c-dd68-425f-bcc4-870d11a71bbd"}, {"timestamp": "2021-03-07T00:00:00Z", "date_only": true, "value": "2021-03-07", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-14813", "record": "CNVD-2021-14813", "field": "openTime"}, {"timestamp": "2021-03-07T19:26:18Z", "date_only": false, "value": "2021-03-07T19:26:18.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/16ee036b-17f5-4f17-b3c3-9fe89176274a", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "603cfdbc-d6f0-47ba-9016-223e593268c6"}, {"timestamp": "2021-03-07T20:09:30Z", "date_only": false, "value": "2021-03-07T20:09:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/4229", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "eaabc04e-be2b-4874-8025-892d25395a4d", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2021-26855 SSRF-Exchange Server. \n\nhttps://github.com/Udyz/CVE-2021-26855", "url": "https://t.me/cKure/4229"}, {"timestamp": "2021-03-08T00:00:00Z", "date_only": false, "value": "2021-03-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-004", "record": "CERTFR-2021-ALE-004", "field": "revisions.2.revision_date"}, {"timestamp": "2021-03-08T13:37:04Z", "date_only": false, "value": "2021-03-08T13:37:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/192", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "bb9923ee-268d-49ad-b566-f0893f2e7cb7", "content": "#BugBountyTips of the Day\nShodan Dork For CVE-2021-26855  1.title:\"Outlook Web App\" 2.\"Set-Cookie: ClientId=\"  #bugbountytips #bugbountytip #ssrf #togetherwehitharder  #hackerone #bugcrowd #CVE-2021-26855\n---\n https://t.co/fOYkocHMIV - Javascript files change Detector and Monitor - I released one of my favorite tools, simple and effective!!     https://t.co/Cz1k56A43C  #bugbounty #bugbountytips  https://t.co/L1dNhxNWF6\n---\nBug bounty Courses \ud83d\udd77   \ud83d\udd77  https://t.co/P1Xw80iSww  \ud83d\udd77  https://t.co/DqKgAl05rX  \ud83d\udd77  https://t.co/vfgM2LS7Jf  \ud83d\udd77  https://t.co/TrEF2F0j5Q  #BugBounty\n---\n https://t.co/ahHQCgsyiq - Find interesting keywords in javascript files and extract the context..  https://t.co/LkcvyAsLLD #bugbounty #bugbountytips  https://t.co/v0nMG0cXYo\n---\nThe Best XSS Polyglot! \ud83d\udea8\ud83d\udea8  jaVasCript:/*-/*`/*\\`/*'/*\"/**/(/* */oNcliCk=alert() )//%0D%0A%0d%0a//</stYle/</titLe/</teXtarEa/</scRipt/--!>\\x3csVg/<sVg/oNloAd=alert()//>\\x3e  #XSS #BugBountyTips #BugBouty #InfoSec #BugBountyTip\n---\nAutomate XSS using QuickXSS !  Releasing QuickXSS v2.0.0 \ud83c\udf89\ud83c\udf89  Features :  1. Added gau for better results 2. Header Injection with Blind XSS Payload 3. Installation file to install all tools. 4. Option to store Result. 5. And many more \ud83e\udd18   https://t.co/oBNWsNZkUN  #bugbountytips", "url": "https://t.me/bhhub/192"}, {"timestamp": "2021-03-09T00:00:00Z", "date_only": false, "value": "2021-03-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-004", "record": "CERTFR-2021-ALE-004", "field": "revisions.4.revision_date"}, {"timestamp": "2021-03-09T08:55:08Z", "date_only": false, "value": "2021-03-09T08:55:08.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/9a64767a-a0c6-4d10-9c1f-a6129ad95e56", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "03600f26-b678-452a-aa09-85ac222cbd26"}, {"timestamp": "2021-03-09T15:17:33Z", "date_only": false, "value": "2021-03-09T15:17:33.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b7636c3e-a515-436b-a646-5ebd750df006", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5df3dde3-0d3c-456e-b430-a989a0776192"}, {"timestamp": "2021-03-09T17:40:09Z", "date_only": false, "value": "2021-03-09T17:40:09.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/6fb63c5a-b927-4500-ac80-844bd9ef0926", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "63f284f4-c7d6-413d-b987-232261282704"}, {"timestamp": "2021-03-09T18:19:07Z", "date_only": false, "value": "2021-03-09T18:19:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/fG9SX7NvJMl_xNJJL1GKE8ehC_nBce-tongNFImZclDD5Q", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8566e518-ae72-4bf7-b8dc-c1f7cd52c715"}, {"timestamp": "2021-03-10T04:23:25Z", "date_only": false, "value": "2021-03-10T04:23:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HackerOne/2949", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7e13f80c-7f90-4448-be47-b25b0ba97871", "content": "dwisiswant0/proxylogscan - A fast tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin (CVE-2021-26855) / ProxyLogon.\nhttps://ift.tt/3cgBplO", "url": "https://t.me/HackerOne/2949"}, {"timestamp": "2021-03-10T13:37:04Z", "date_only": false, "value": "2021-03-10T13:37:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/194", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5721a8ba-2d66-4711-9580-0c96c8b3bb37", "content": "#BugBountyTips of the Day\nCheck out this #BugBountyTip by @Intigriti OG @mr_hacker0007! This technique is often overseen when testing for SSRF, so make sure to add it to your checklist! \u2705 #BugBountyTips  https://t.co/zy6W20kMHO\n---\nThousands of US companies have been hacked by Chinese hackers using This RCE.  Microsoft Exchange Server Remote Code Execution CVE-2021-26855 Exploit.  https://t.co/4UNlGK3ewf  #BugBounty #RCE #infosec  https://t.co/YKWOCIKjXk\n---\nOpen redirect Payloads #bugbounty #bugbountytips  https://t.co/DYu853aliJ\n---\n https://t.co/7i5zJNj8zX  #ctf #reverseshell #revshell #bugbounty #tryhackme #hacktricks #bugtips #rce #netcat #xss #hackerhashtags #cybersecurity #cybersecuritytips  https://t.co/5QLKmRRJR2\n---\n[+] Linkedin XSS vulnerability affecting 40+ domains...      https://t.co/XXusjr0kFf  #AEMSecurity #bugbountytips", "url": "https://t.me/bhhub/194"}, {"timestamp": "2021-03-11T11:26:23Z", "date_only": false, "value": "2021-03-11T11:26:23.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/4263", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e959596d-9280-4122-b9e8-360c80318306", "content": "\u25a0\u25a1\u25a1\u25a1\u25a1 SSRF PoC for CVE-2021-26855.\n\nhttps://github.com/projectdiscovery/nuclei-templates/blob/master/cves/2021/CVE-2021-26855.yaml", "url": "https://t.me/cKure/4263"}, {"timestamp": "2021-03-11T17:25:28Z", "date_only": false, "value": "2021-03-11T17:25:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/4269", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "af5565e8-16bc-434c-9794-d3ad61b59612", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 PoC of proxylogon chain SSRF(CVE-2021-26855) | not tested.", "url": "https://t.me/cKure/4269"}, {"timestamp": "2021-03-11T18:05:03Z", "date_only": false, "value": "2021-03-11T18:05:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5ef60b0d-a198-4216-93c5-4b12748294ae", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0a618a34-41dc-41fc-8b75-705c2703a3e8"}, {"timestamp": "2021-03-12T13:37:04Z", "date_only": false, "value": "2021-03-12T13:37:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/196", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "bed04215-9d55-42f3-9b13-5ade828f17f6", "content": "#BugBountyTips of the Day\nI had some 10/10 Criticals @ h1-2103 \u2764\ufe0f\ud83d\ude0b Thanks @Hacker0x01 for the opportunity. #BugBounty #GeneralEG  https://t.co/gdhgPoFveV\n---\nGot triaged for report about #CVE-2021-26855  By using @shodanhq #dorks  title:\"Outlook Web App\" hostname: https://t.co/xuOSInXVIb  #bugbountytips  #bugbountytip  https://t.co/WvNh0dOcWf\n---\nTo reduce unwanted traffic burp SSL Pass Through: \\.digicert\\.com$ \\.facebook\\.com$ \\.facebook\\.org$ \\.mozilla\\.com$ \\.mozilla\\.org$ \\.mozilla\\.net$ \\.google\\.com$ \\.mcafee\\.com$ \\.mcafeewebadvisor\\.com$ \\.githubusercontent\\.com$  #bugbounty #bugbountytips #BugBountyTip  #cyber\n---\nBounty for P5\ud83d\udd25\ud83e\udd1f  @Bugcrowd \u2764\ufe0f\u2764\ufe0f #bugbounty  https://t.co/37jCjXUPA4\n---\nThe fastest directory bruteforcer out there. I hate to say goodbye to Dirb & Gobuster, but it's time \ud83d\ude4f -  https://t.co/cllI81YTiR - #bruteforce #ctf #cybersecurity #rust #dirbusting #lfi #hacking #cybersecuritytips #BugBounty #tryhackme  https://t.co/1qg0gVGY9K", "url": "https://t.me/bhhub/196"}, {"timestamp": "2021-03-12T17:28:59Z", "date_only": false, "value": "2021-03-12T17:28:59.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/da8a7421-97cb-4144-b421-4b82fa85e9a6", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1e7287a3-30df-4f80-89ca-c6535038d15b"}, {"timestamp": "2021-03-12T19:47:12Z", "date_only": false, "value": "2021-03-12T19:47:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/4297", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "729a70e8-9f2c-4e10-8be0-cb8d2146d724", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Microsoft Exchange 2019 - SSRF to Arbitrary File Write (Proxylogon).\n\nCVE-2021-27065\nCVE-2021-26855\n\nhttps://www.exploit-db.com/exploits/49637", "url": "https://t.me/cKure/4297"}, {"timestamp": "2021-03-14T02:55:09Z", "date_only": false, "value": "2021-03-14T02:55:09.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cyberbannews_ir/2876", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9e2f5a09-d7b3-4ed3-aa2d-4f02cdfe4783", "content": "\ud83d\uded1\u0645\u062a\u0647\u0645 \u0634\u062f\u0646 \u0686\u06cc\u0646 \u0628\u0647 \u0646\u0641\u0648\u0630 \u062f\u0631 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0627\u06cc\u0645\u06cc\u0644 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a\n\n\u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u062a\u0639\u062f\u0627\u062f\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0635\u0641\u0631 \u0631\u0648\u0632 \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f \u06a9\u0647 \u0628\u0631\u0627\u06cc \u062d\u0645\u0644\u0647 \u0628\u0647 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0645\u0648\u062c\u0648\u062f \u062f\u0631 \u0633\u0631\u0648\u0631 \u00abExchange\u00bb \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0645\u062d\u062f\u0648\u062f \u0648 \u0647\u062f\u0641\u0645\u0646\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f.\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0639\u0628\u0627\u0631\u062a\u0646\u062f \u0627\u0632 :\n\n\u00abCVE-2021-26855\u00bb\u060c \u00abCVE-2021-26857\u00bb\u060c \u00abCVE-2021-26858\u00bb \u0648 \u00abCVE-2021-27065\u00bb.\n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc\n\n\u2705 \u0628\u06cc\u0634\u062a\u0631 \u0628\u062e\u0648\u0627\u0646\u06cc\u062f:\nhttps://bit.ly/2NgsLLD\n\n@cyberbannews_ir", "url": "https://t.me/cyberbannews_ir/2876"}, {"timestamp": "2021-03-14T07:17:00Z", "date_only": false, "value": "2021-03-14T07:17:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/codeby_sec/4196", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9fc5347a-585c-47f2-9c34-d2b9e3faae2a", "content": "\u200b\u200b\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-26855\n\n\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0414\u0440\u0443\u0437\u0435\u0439 \u0438 \u0423\u0432\u0430\u0436\u0430\u0435\u043c\u044b\u0445 \u0424\u043e\u0440\u0443\u043c\u0447\u0430\u043d.\u041d\u0435\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e \u043d\u0430\u0448\u0443\u043c\u0435\u0432\u0448\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2021-26855. \u0421 \u0447\u0435\u0433\u043e \u0432\u0441\u0451 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c - \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0438 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u044b \u0442\u044b\u0441\u044f\u0447\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e 50 \u0442\u044b\u0441\u044f\u0447.\u041f\u043e\u0434 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u043d\u0438\u0435 \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043f\u0430\u043b\u0430 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 HAFNIUM.CVE-2021-26855 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u043b\u0430\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e.\n\n\u0427\u0438\u0442\u0430\u0442\u044c: https://codeby.net/threads/ujazvimost-cve-2021-26855.76944/\n\n#cve #windows #exchange", "url": "https://t.me/codeby_sec/4196"}, {"timestamp": "2021-03-14T18:52:36Z", "date_only": false, "value": "2021-03-14T18:52:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/vxunderground/253", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "14f265f8-030b-4e3d-b55c-b5298b9f5e19", "content": "\u041a\u0430\u043a \u0432\u044b \u0443\u0436\u0435 \u0441\u043b\u044b\u0448\u0430\u043b\u0438, PoC \u0434\u043b\u044f CVE-2021-26855 \u0431\u044b\u043b \u0443\u0434\u0430\u043b\u0435\u043d \u0441 \u0433\u0438\u0442\u0445\u0430\u0431\u0430. \u0421\u043a\u0430\u0447\u0430\u0442\u044c \u0432\u044b \u0435\u0433\u043e \u043c\u043e\u0436\u0435\u0442\u0435 \u0441 \u043d\u0430\u0448\u0435\u0433\u043e \u0441\u0430\u0439\u0442\u0430\n\nhttps://vxug.fakedoma.in/archive/tmp/", "url": "https://t.me/vxunderground/253"}, {"timestamp": "2021-03-15T04:50:46Z", "date_only": false, "value": "2021-03-15T04:50:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/infobes/295", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "939365f9-c454-4583-9e14-9abdb9ad10bf", "content": "#Analytics\n10 most exploited vulnerabilities of the week (march 8 - 14)\nCVE-2021-26855, CVE-2021-27065 - ProxyLogon MS Exchange Server RCE Vulnerability\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-1732 - Windows kernel 0-day exploit\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-22986, CVE-2021-22987 - F5 BIG-IP TMM uri_normalize_host infoleak and out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-21193 - Google Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-21978 - VMware View Planner\u00a0RCE\nhttps://mobile.twitter.com/osama_hroot/status/1367258907601698816\nhttps://paper.seebug.org/1495\nCVE-2021-21300 - Git vulnerability\nhttps://t.me/cybersecuritytechnologies/2880\nCVE-2021-26411 - IE mshtml use-after-free\nhttps://t.me/cybersecuritytechnologies/2908", "url": "https://t.me/infobes/295"}, {"timestamp": "2021-03-15T11:00:37Z", "date_only": false, "value": "2021-03-15T11:00:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2911", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c05e2a09-9b53-4cb4-b86c-d1707e9d8f1d", "content": "#Analytics\n10 most exploited vulnerabilities of the week (march 8 - 14)\nCVE-2021-26855, CVE-2021-27065 - ProxyLogon MS Exchange Server RCE Vulnerability\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-1732 - Windows kernel 0-day exploit\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-22986, CVE-2021-22987 - F5 BIG-IP TMM uri_normalize_host infoleak and out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-21193 - Google Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-21978 - VMware View Planner\u00a0RCE\nhttps://mobile.twitter.com/osama_hroot/status/1367258907601698816\nhttps://paper.seebug.org/1495\nCVE-2021-21300 - Git vulnerability\nhttps://t.me/cybersecuritytechnologies/2880\nCVE-2021-26411 - IE mshtml use-after-free\nhttps://t.me/cybersecuritytechnologies/2908", "url": "https://t.me/CyberSecurityTechnologies/2911"}, {"timestamp": "2021-03-15T22:01:21Z", "date_only": false, "value": "2021-03-15T22:01:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/C5esoTAnUKodaTIvU7oFACNsSgWTlszrXe1IvfEtt10bIQ", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a6148852-0f71-4764-b5b5-c646142197b4"}, {"timestamp": "2021-03-16T00:00:00Z", "date_only": false, "value": "2021-03-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-004", "record": "CERTFR-2021-ALE-004", "field": "revisions.5.revision_date"}, {"timestamp": "2021-03-16T06:00:00Z", "date_only": false, "value": "2021-03-16T06:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://msrc.microsoft.com/blog/2021/03/guidance-for-responders-investigating-and-remediating-on-premises-exchange-server-vulnerabilities/", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "54615667-551c-4f0e-b855-5f2394b8a9ae", "url": "https://msrc.microsoft.com/blog/2021/03/guidance-for-responders-investigating-and-remediating-on-premises-exchange-server-vulnerabilities/"}, {"timestamp": "2021-03-16T12:24:01Z", "date_only": false, "value": "2021-03-16T12:24:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2918", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "eb1366c3-b432-48d5-8be7-af4d915b8191", "content": "#Blue_Team_Techniques\nMicrosoft Exchange On-Premises Mitigation Tool (partial mitigations CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065)\nhttps://msrc-blog.microsoft.com/2021/03/15/one-click-microsoft-exchange-on-premises-mitigation-tool-march-2021\n+ Security scripts:\nhttps://github.com/microsoft/CSS-Exchange/tree/main/Security", "url": "https://t.me/CyberSecurityTechnologies/2918"}, {"timestamp": "2021-03-16T16:55:45Z", "date_only": false, "value": "2021-03-16T16:55:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/1cc4d8d4-4592-4dae-bcdf-2fb9d38b794c", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2eb7db9d-68cd-4b33-9de6-b341cf7d77ae"}, {"timestamp": "2021-03-16T18:25:17Z", "date_only": false, "value": "2021-03-16T18:25:17.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/IWbg_1plWTQ_6oxOOS4uIAd75N1sihd7idJ11c0LEdMPQw", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e318fb4d-fad2-4758-b09f-f81b6bc9db05"}, {"timestamp": "2021-03-17T15:30:49Z", "date_only": false, "value": "2021-03-17T15:30:49.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f4fec1fc-0320-4c81-8c42-4cb04b77fc44", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "25a81a68-8fba-4275-b157-18fa967d7c2b"}, {"timestamp": "2021-03-19T12:13:11Z", "date_only": false, "value": "2021-03-19T12:13:11.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/9364", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2fca2f16-2a09-4fc9-9299-e8ca97d90618", "content": "Microsoft Defender adds automatic Exchange ProxyLogon mitigation\n\nMicrosoft Defender Antivirus will now protect unpatched on-premises Exchange servers from ongoing attacks by automatically mitigating the actively exploited CVE-2021-26855 vulnerability. [...]\n\nhttps://www.bleepingcomputer.com/news/security/microsoft-defender-adds-automatic-exchange-proxylogon-mitigation/", "url": "https://t.me/BleepingComputer/9364"}, {"timestamp": "2021-03-22T10:14:45Z", "date_only": false, "value": "2021-03-22T10:14:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/infobes/301", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "61afd554-28cf-4049-8134-d87ee1b10db5", "content": "CVE-2021-26855/27065 - ProxyLogon MS Exchange Server RCE Vulnerability\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-22986 - F5 BIG-IP TMM uri_normalize_host infoleak and out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-27076 - A Replay-style Deserialization Attack Against SharePoint\nhttps://t.me/cybersecuritytechnologies/2930\nCVE-2021-21193 - Google Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-22987 - F5 BIG-IP TMM uri_normalize_host infoleak and out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-21193:\nGoogle Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-27076:\nReplay Deserialization Attack Against SharePoint\nhttps://t.me/cybersecuritytechnologies/2930\nCVE-2021-27889, CVE-2021-27890:\nMyBB RCE Chain\nhttps://blog.sonarsource.com/mybb-remote-code-execution-chain", "url": "https://t.me/infobes/301"}, {"timestamp": "2021-03-23T15:16:46Z", "date_only": false, "value": "2021-03-23T15:16:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/exchange_proxylogon_collector.rb", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f7148043-430a-458d-9778-38df68b9f6f7", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/exchange_proxylogon_collector.rb"}, {"timestamp": "2021-03-23T15:16:46Z", "date_only": false, "value": "2021-03-23T15:16:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/exchange_proxylogon.rb", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "260941b5-66a3-487e-a9fe-b010eee05a5c", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/exchange_proxylogon.rb"}, {"timestamp": "2021-03-23T15:16:46Z", "date_only": false, "value": "2021-03-23T15:16:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/exchange_proxylogon_rce.rb", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "307d3e2b-74b4-4590-abd5-033c7577bf1e", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/exchange_proxylogon_rce.rb"}, {"timestamp": "2021-03-25T05:17:33Z", "date_only": false, "value": "2021-03-25T05:17:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/30855", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f5bb59dd-549c-43ba-a091-a51f15525582", "content": "Microsoft Exchange \u6f0f\u6d1e\uff08CVE-2021-26855\uff09\u5728\u91ce\u626b\u63cf\u5206\u6790\u62a5\u544a\n\nhttps://ift.tt/3f78Rya", "url": "https://t.me/ctinow/30855"}, {"timestamp": "2021-03-25T08:07:19Z", "date_only": false, "value": "2021-03-25T08:07:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/30859", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b34766fa-bf47-4a88-9c0a-ccfbbfbe176b", "content": "U.S. Dept Of Defense: SSRF due to CVE-2021-26855 on \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\n\nhttps://ift.tt/3rmUiJf", "url": "https://t.me/ctinow/30859"}, {"timestamp": "2021-03-25T08:07:20Z", "date_only": false, "value": "2021-03-25T08:07:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/30860", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3b071735-c13c-47c4-b479-b5566dac6e83", "content": "U.S. Dept Of Defense: CVE-2021-26855 on \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 resulting in SSRF\n\nhttps://ift.tt/2P48Ccx", "url": "https://t.me/ctinow/30860"}, {"timestamp": "2021-03-25T14:08:10Z", "date_only": false, "value": "2021-03-25T14:08:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/30878", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "496d1a56-6449-4e31-bb1b-b6e0a4ca63ab", "content": "Microsoft Exchange Vulnerability (CVE-2021-26855) Scan Analysis\n\nhttps://ift.tt/31jZjrj", "url": "https://t.me/ctinow/30878"}, {"timestamp": "2021-03-29T03:08:41Z", "date_only": false, "value": "2021-03-29T03:08:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/infobes/305", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e4af1c23-92f7-4975-9325-159ad0c7c530", "content": "#Analytics\n10 most exploited vulnerabilities of the week (march 22-28)\nCVE-2021-26855 - ProxyLogon MS Exchange Server RCE\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-22986/22987 - F5 BIG-IP TMM uri_normalize_host infoleak/out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-1732 - Windows kernel 0-day exploit\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-3449/3450 - OpenSSL DoS/certificate validation\nhttps://t.me/cybersecuritytechnologies/2993\nhttps://thehackernews.com/2021/03/openssl-releases-patches-for-2-high.html?m=1#click=https://t.co/z6FHjamuUy\nCVE-2021-26295 - Apache OFBiz unsafe deserialization\nhttps://t.me/cybersecuritytechnologies/2978\nCVE-2020-14179 - JIRA Information Disclosure\nhttps://t.me/cybersecuritytechnologies/2581\nCVE-2020-17453 - XSS In WSO2 Carbon Mgmnt Console\nhttps://t.me/cybersecuritytechnologies/3006\nCVE-2021-21087 - Adobe ColdFusion RCE\nhttps://www.bleepingcomputer.com/news/security/critical-code-execution-vulnerability-fixed-in-adobe-coldfusion", "url": "https://t.me/infobes/305"}, {"timestamp": "2021-03-29T05:54:18Z", "date_only": false, "value": "2021-03-29T05:54:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2955", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c4bba1c8-ac1a-4aa8-abd1-0abe77575657", "content": "#Analytics\n10 most exploited vulnerabilities of the week (march 15 - 21)\nCVE-2021-26855/27065 - ProxyLogon MS Exchange Server RCE\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2021-22986/22987 - F5 BIG-IP TMM uri_normalize_host infoleak and out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-27076 - A Replay-style Deserialization Attack Against SharePoint\nhttps://t.me/cybersecuritytechnologies/2930\nCVE-2021-21193 - Google Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-21193:\nGoogle Chrome Blink code execution\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-21193\nCVE-2021-27076:\nReplay Deserialization Attack Against SharePoint\nhttps://t.me/cybersecuritytechnologies/2930\nCVE-2021-27889, CVE-2021-27890:\nMyBB RCE Chain\nhttps://blog.sonarsource.com/mybb-remote-code-execution-chain", "url": "https://t.me/CyberSecurityTechnologies/2955"}, {"timestamp": "2021-04-08T08:27:16Z", "date_only": false, "value": "2021-04-08T08:27:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/YAH_Channel/396", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "13c407d4-df80-4188-9764-92df4a2aa0b1", "content": "\u0413\u0430\u0439\u0434 \u043f\u043e \u043e\u0445\u043e\u0442\u0435 \u043d\u0430 \u0430\u0442\u0430\u043a\u0438 MS Exchange. \u0427\u0430\u0441\u0442\u044c 1: ProxyLogon\n\n\u0421 \u043a\u043e\u043d\u0446\u0430 2020 \u0433\u043e\u0434\u0430 \u0440\u0435\u0437\u043a\u043e \u0432\u044b\u0440\u043e\u0441\u043b\u043e \u0447\u0438\u0441\u043b\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432, \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0435\u0439 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 MS Exchange \u0438 \u0435\u0433\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432. \u041c\u044b \u0440\u0435\u0448\u0438\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u044b \u0438\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0441\u0432\u043e\u0438\u043c \u043e\u043f\u044b\u0442\u043e\u043c.\n\n\u041f\u0435\u0440\u0432\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0433\u0430\u0439\u0434\u0430 \u043f\u043e\u0441\u0432\u044f\u0442\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ProxyLogon (CVE-2021-26855, 26858, 27065, 26857). \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0438\u0445, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Exchange (ECP), \u0430 \u043f\u043e\u0442\u043e\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0444\u0430\u0439\u043b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \n\n\u041c\u044b \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438, \u043a\u0430\u043a \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0448\u0442\u0430\u0442\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 Exchange \u043c\u043e\u0436\u043d\u043e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0437\u0430\u0441\u0435\u0447\u044c \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c ProxyLogon, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0441\u043b\u0435\u0434\u044b \u0430\u0442\u0430\u043a, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c. \n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u0432 \u043d\u0430\u0448\u0435\u043c \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0435.", "url": "https://t.me/YAH_Channel/396"}, {"timestamp": "2021-04-12T11:01:12Z", "date_only": false, "value": "2021-04-12T11:01:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/3104", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3fa84898-8afa-4193-8fcb-4555d47ff800", "content": "#Analytics\n10 most exploited vulnerabilities of the week (April 5-11)\nCVE-2021-26855 - ProxyLogon MS Exchange Srv RCE\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-26411 - IE mshtml UAF\nhttps://t.me/cybersecuritytechnologies/2908\nCVE-2021-3129 - Laravel debug RCE\nhttps://t.me/cybersecuritytechnologies/2557\nCVE-2021-26708 - LPE in the Linux kernel <5.10.x\nhttps://github.com/jordan9001/vsock_poc\nCVE-2020-16040 - V8 JIT Compiler Bug\nhttps://t.me/cybersecuritytechnologies/2450\nCVE-2021-21982 - SSRF in VMWare\nhttps://t.me/cybersecuritytechnologies/3039\nCVE-2021-21402 - UAF read in Jellyfin\nhttps://t.me/cybersecuritytechnologies/3064\nCVE-2021-29154 - BPF JIT bug\nhttps://www.openwall.com/lists/oss-security/2021/04/08/1", "url": "https://t.me/CyberSecurityTechnologies/3104"}, {"timestamp": "2021-04-15T11:12:50Z", "date_only": false, "value": "2021-04-15T11:12:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/33ba44b7-6120-46e1-9474-44bef434ff4c", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1a07a3bb-73be-48c7-b4f6-c34b24ca86a2"}, {"timestamp": "2021-04-16T00:00:00Z", "date_only": true, "value": "2021-04-16", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-26855", "record": "GSD-2021-26855", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2021-04-18T02:48:07Z", "date_only": false, "value": "2021-04-18T02:48:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/Z3J26ueeLSGT5u8IbSZN9LzuyKYVGQCGSf0qny9jVr-bBQ", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ed9ddc8d-3c7f-492c-96db-4b428d99958d"}, {"timestamp": "2021-05-18T15:51:34Z", "date_only": false, "value": "2021-05-18T15:51:34.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/5437", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a9d07627-d187-43be-8c9e-6f13ca9d2fd5", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2021-26855: Microsoft Exchange 2019 - Unauthenticated Email Download.\n\nhttps://www.exploit-db.com/exploits/49879", "url": "https://t.me/cKure/5437"}, {"timestamp": "2021-07-15T16:53:29Z", "date_only": false, "value": "2021-07-15T16:53:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HackerOne/3086", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "24897b65-070d-4a68-a100-75db03d88750", "content": "https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2021/CVE-2021-26855.html", "url": "https://t.me/HackerOne/3086"}, {"timestamp": "2021-07-16T00:00:00Z", "date_only": false, "value": "2021-07-16T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-004", "record": "CERTFR-2021-ALE-004", "field": "last_revision_date"}, {"timestamp": "2021-07-16T00:00:00Z", "date_only": false, "value": "2021-07-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2021-ALE-004", "record": "CERTFR-2021-ALE-004", "field": "revisions.6.revision_date"}, {"timestamp": "2021-07-29T17:59:02Z", "date_only": false, "value": "2021-07-29T17:59:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Russian_OSINT/875", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b6eab073-e412-40a8-b3ce-128a1b92c74e", "content": "\u200b\u200b\ud83d\ude94 \u0424\u0411\u0420 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u043f\u0438\u0441\u043e\u043a 30 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 2 \u0433\u043e\u0434\u0430\n\nCVE-2021-26855: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-26857: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-26858: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-27065: It is a Microsoft Exchange Server Remote Code Execution\nCVE-2021-22893: It is an Improper Authentication vulnerability that is marked as critical\nCVE-2021-22894: It is a buffer overflow vulnerability that enables an attacker to execute arbitrary code\nCVE-2021-22899: It is a command injection vulnerability that enables an attacker to execute remote code\nCVE-2021-22900: It is an Improper Control of Generation of Code vulnerability\nCVE-2021-27101: It is an Improper Neutralization of Special Elements used in an SQL Command\nCVE-2021-27102: It is an Improper Neutralization of Special Elements used in an OS Command\nCVE-2021-27103: It is a Server-Side Request Forgery (SSRF) vulnerability\nCVE-2021-27104: It is an Improper Neutralization of Special Elements used in an OS Command vulnerability\nCVE-2021-21985: It is an Improper Input Validation vulnerability\nCVE-2018-13379: It is an Improper Limitation of a Pathname to a Restricted Directory (\u2018Path Traversal\u2019)\nCVE-2020-12812: It is an Improper Authentication vulnerability\nCVE-2019-5591: It is a Missing Authentication for Critical Function vulnerability\nCVE-2019-19781: It is an Improper Limitation of a Pathname to a Restricted Directory \nCVE 2019-11510: It is an Improper Limitation of a Pathname to a Restricted Directory\nCVE 2018-13379: It is an Improper Limitation of a Pathname to a Restricted Directory \nCVE 2020-5902: It is an Inclusion of Functionality from Untrusted Control Sphere and Improper Limitation of a Pathname to a Restricted Directory vulnerability \nCVE 2020-15505: It is an Insufficient Information vulnerability\nCVE-2017-11882: It is a Microsoft Office Memory Corruption vulnerability that enables an attacker to execute arbitrary code.\nCVE-2019-11580: It is an Insufficient Information vulnerability\nCVE-2018-7600: It is an Improper Input Validation vulnerability\nCVE 2019-18935: It is a Deserialization of Untrusted Data vulnerability\nCVE-2019-0604: It is a Microsoft SharePoint Remote Code Execution Vulnerability\nCVE-2020-0787: It is a Windows Background Intelligent Transfer Service Elevation of Privilege vulnerability\nCVE-2020-1472: It is a Netlogon Elevation of Privilege vulnerability \nCVE-2020-15505: It is an Insufficient Information vulnerability\nCVE-2020-0688: It is a Use of Hard-coded Credentials vulnerability", "url": "https://t.me/Russian_OSINT/875"}, {"timestamp": "2021-08-02T06:19:12Z", "date_only": false, "value": "2021-08-02T06:19:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/GithubRedTeam/245", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "64e94743-916e-416a-b40b-a51227c058dc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-26855 & CVE-2021-27065 Fixed Bug Exploit\nURL\uff1ahttps://github.com/hosch3n/ProxyLogon", "url": "https://t.me/GithubRedTeam/245"}, {"timestamp": "2021-08-13T00:40:49Z", "date_only": false, "value": "2021-08-13T00:40:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/F8dUz3LYF3oMpV4A-78UMg74q0xVGxzzQobNUWNiGKB7bg", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2d748778-de24-4c8c-9a4f-313769f62c68"}, {"timestamp": "2021-08-25T07:14:29Z", "date_only": false, "value": "2021-08-25T07:14:29.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/386236f1-29ba-47df-b4e6-e0fe458cd285", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d488ed12-745c-428a-ac28-d9e18f4d2dac"}, {"timestamp": "2021-09-20T19:00:59Z", "date_only": false, "value": "2021-09-20T19:00:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tomhunter/283", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f20fb4a6-dec4-487e-b12b-b706be4131b0", "content": "#news \u041f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0439 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 \u0433\u0443\u0431\u0435\u0440\u043d\u0430\u0442\u043e\u0440\u043e\u0432 (RGA) \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0445\u0430\u043a\u0435\u0440\u044b. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u043a\u0430\u043a ProxyLogon (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445\u0441\u044f \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Microsoft Exchange, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0435 RGA \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2021 \u0433\u043e\u0434\u0430 \u043f\u043e \u043c\u0430\u0440\u0442 2021 \u0433\u043e\u0434\u0430. \n\n\u0420\u0430\u043d\u0435\u0435 Microsoft \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u043f\u043e\u043d\u0441\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u0443, Hafnium, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ProxyLogon \u043f\u0440\u043e\u0442\u0438\u0432 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u041f\u043e\u043b\u0443\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443 Microsoft Exchange, Hafnium \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c \u043a\u0440\u0430\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043b\u044e\u0431\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u0438\u0442\u0430\u0439\u0446\u044b \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u0421\u0428\u0410 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Microsoft Exchange. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ESET \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430  \u043f\u043e \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u043c\u0435\u0440\u0435 \u0434\u0435\u0441\u044f\u0442\u044c APT-\u0433\u0440\u0443\u043f\u043f, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Exchange.\n\n@tomhunter", "url": "https://t.me/tomhunter/283"}, {"timestamp": "2021-09-21T06:42:55Z", "date_only": false, "value": "2021-09-21T06:42:55.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pwnwiki_zhchannel/4", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "97e62810-37e3-4736-829d-2d288083c677", "content": "CVE-2021-26855 - Exchange Server SSRF\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-26855_-_Exchange_Server_SSRF%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/4"}, {"timestamp": "2021-09-22T08:54:20Z", "date_only": false, "value": "2021-09-22T08:54:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/575", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5f12492b-294a-4bf0-8313-42e6998fd093", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1a[ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyShell] CVE-2021-31195 & CVE-2021-31196 Exploit Chains\nURL\uff1ahttps://github.com/hosch3n/ProxyVulns", "url": "https://t.me/GithubRedTeam/575"}, {"timestamp": "2021-09-22T14:47:17Z", "date_only": false, "value": "2021-09-22T14:47:17.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacker_trick/207", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e022f9fa-359d-4a81-b541-fdb8336ff358", "content": "[ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains. [ProxyShell] WaitForUpdate\n\nhttps://github.com/hosch3n/ProxyVulns", "url": "https://t.me/hacker_trick/207"}, {"timestamp": "2021-09-29T14:05:43Z", "date_only": false, "value": "2021-09-29T14:05:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/8e72c666-3a2f-4bf3-b671-eb1dfbcfc9cb", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6f60d37a-ba11-41f1-a55a-1a75a3636430"}, {"timestamp": "2021-10-25T22:30:42Z", "date_only": false, "value": "2021-10-25T22:30:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/63ddead6-4b82-414c-ad8e-c516b950b446", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ad6bcbd4-0346-4209-81af-c91d2ea39948"}, {"timestamp": "2021-10-30T11:33:58Z", "date_only": false, "value": "2021-10-30T11:33:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/GithubRedTeam/775", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "39d1c0df-873d-41a1-9f54-284666d1c1f8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aC# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode in\u2026\nURL\uff1ahttps://github.com/yaoxiaoangry3/Flangvik", "url": "https://t.me/GithubRedTeam/775"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-26855", "field": "timestamps.asserted_at", "uuid": "a24818ce-a975-43a1-80b3-1a2e2e4cefaa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-26855", "field": "timestamps.asserted_at", "uuid": "689a1567-2b26-4e7f-9bf7-77e3a951a6c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-26855", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-26855", "record": "GSD-2021-26855", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-26855", "field": "evidence.0.details.added_date", "uuid": "689a1567-2b26-4e7f-9bf7-77e3a951a6c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-26855", "field": "evidence.0.details.date_added", "uuid": "a24818ce-a975-43a1-80b3-1a2e2e4cefaa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-26855", "field": "timestamps.first_seen_at", "uuid": "a24818ce-a975-43a1-80b3-1a2e2e4cefaa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-26855", "field": "timestamps.first_seen_at", "uuid": "689a1567-2b26-4e7f-9bf7-77e3a951a6c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-26855", "field": "status.status_updated_at", "uuid": "a24818ce-a975-43a1-80b3-1a2e2e4cefaa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-26855", "field": "status.status_updated_at", "uuid": "689a1567-2b26-4e7f-9bf7-77e3a951a6c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-26855", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:19Z", "date_only": false, "value": "2021-11-08T08:58:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "90c458a3-9353-42c5-8038-37416baddae8"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0c550065-ffe0-4f06-8ca6-5721b46b763a"}, {"timestamp": "2021-12-04T22:43:06Z", "date_only": false, "value": "2021-12-04T22:43:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/GithubRedTeam/904", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f4a1155f-8dd7-4750-9eae-31e4cb6e74dc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aMicrosoft Exchange ProxyLogon PoC (CVE-2021-26855)\nURL\uff1ahttps://github.com/thau0x01/poc_proxylogon", "url": "https://t.me/GithubRedTeam/904"}, {"timestamp": "2021-12-05T01:23:41Z", "date_only": false, "value": "2021-12-05T01:23:41.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BlueRedTeam/1272", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ff8328af-cbd1-46cb-a0ee-5eb6116f8c5a", "content": "CVE-2021\n\nMicrosoft Exchange ProxyLogon PoC (CVE-2021-26855)\n\nhttps://github.com/thau0x01/poc_proxylogon\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1272"}, {"timestamp": "2022-02-05T04:06:36Z", "date_only": false, "value": "2022-02-05T04:06:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/dc7342/48457", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3f391e62-8a99-4858-8ba2-959afedb9e48", "content": "INCEPTION #6  - \u044d\u0442\u043e \u0446\u0435\u043b\u043e\u0435 \u0441\u043e\u0431\u044b\u0442\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0430\u043d\u0434\u0435\u0433\u0440\u0430\u0443\u043d\u0434\u0430, \u0447\u0438\u0442\u0430\u0442\u044c \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e !\n\u0432 \u043d\u043e\u043c\u0435\u0440\u0435:\n   1.  CobaltStrike \u043e\u0442 \u0410 \u0434\u043e \u042f. \n   2.  \u0420\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0432 \u041e\u0421 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 Windows. \u041c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u0438\u043c\u0435\u0440. \n    3.  ProxyLogon & CVE-2021-26855.\n    4.  How I exploited this corporation for $100k in 7 days. \n    5.  \u0412\u044b \u0434\u0443\u043c\u0430\u043b\u0438, \u044f \u0432\u0430\u0441 \u043d\u0435 \u043f\u0435\u0440\u0435\u0438\u0433\u0440\u0430\u044e? \n    6.  \u041a\u0430\u043a \u044f \u043f\u043e\u043a\u0430\u0437\u0430\u043b \u043f\u043e\u0440\u043d\u0443\u0445\u0443 \u0432 Hilton & 0day \u0432 Dish. \n    7.  HVNC \u0447\u0430\u0441\u0442\u044c 1: dll-hijacking, hooks, rat.", "url": "https://t.me/dc7342/48457"}, {"timestamp": "2022-02-09T08:55:39Z", "date_only": false, "value": "2022-02-09T08:55:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/617", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7cf4c85a-0c29-43d3-85af-2e6709099a60", "content": "INCEPTION #6  - \u044d\u0442\u043e \u0446\u0435\u043b\u043e\u0435 \u0441\u043e\u0431\u044b\u0442\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0430\u043d\u0434\u0435\u0433\u0440\u0430\u0443\u043d\u0434\u0430, \u0447\u0438\u0442\u0430\u0442\u044c \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e !\n\u0432 \u043d\u043e\u043c\u0435\u0440\u0435:\n   1.  CobaltStrike \u043e\u0442 \u0410 \u0434\u043e \u042f. \n   2.  \u0420\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0432 \u041e\u0421 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 Windows. \u041c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u0438\u043c\u0435\u0440. \n    3.  ProxyLogon & CVE-2021-26855.\n    4.  How I exploited this corporation for $100k in 7 days. \n    5.  \u0412\u044b \u0434\u0443\u043c\u0430\u043b\u0438, \u044f \u0432\u0430\u0441 \u043d\u0435 \u043f\u0435\u0440\u0435\u0438\u0433\u0440\u0430\u044e? \n    6.  \u041a\u0430\u043a \u044f \u043f\u043e\u043a\u0430\u0437\u0430\u043b \u043f\u043e\u0440\u043d\u0443\u0445\u0443 \u0432 Hilton & 0day \u0432 Dish. \n    7.  HVNC \u0447\u0430\u0441\u0442\u044c 1: dll-hijacking, hooks, rat.", "url": "https://t.me/proxy_bar/617"}, {"timestamp": "2022-04-28T16:01:15Z", "date_only": false, "value": "2022-04-28T16:01:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/1424", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c4d1caa2-2aaa-431d-9d02-c0e8ca22a2ef", "content": "ProxyLogon\n\u0424\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u043e\u0431\u0449\u0435\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2021-26855, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Microsoft Exchange Server, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u041c\u044b \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043b\u0438 \u044d\u0442\u0443 \u043e\u0448\u0438\u0431\u043a\u0443 \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u043e\u0441\u043b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, CVE-2021-27065, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\nhttps://github.com/RickGeex/ProxyLogon\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/1424"}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-26855", "field": "evidence.0.details.due_date", "uuid": "a24818ce-a975-43a1-80b3-1a2e2e4cefaa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-24T17:43:35Z", "date_only": false, "value": "2022-05-24T17:43:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6784-2MH5-CQ56", "record": "GHSA-6784-2MH5-CQ56", "field": "published"}, {"timestamp": "2022-06-01T02:32:51Z", "date_only": false, "value": "2022-06-01T02:32:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/3057", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "83a6e861-70ee-464c-842a-5d1ed7c83e03", "content": "#Analytics\n10 most exploited vulnerabilities of the week (March 29 - April 4)\nCVE-2021-26855 - ProxyLogon MS Exchange Server RCE\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-3449/3450 - OpenSSL DoS/certificate validation\nhttps://t.me/cybersecuritytechnologies/2993\nhttps://thehackernews.com/2021/03/openssl-releases-patches-for-2-high.html\nCVE-2021-21975/CVE-2021-21983 - SSRF in VMWare vRealize Operations Manager API\nhttps://t.me/cybersecuritytechnologies/3039\nCVE-2019-8761 - macOS bug that lets attackers execute HTML within a TXT file\nhttps://www.paulosyibelo.com/2021/04/this-man-thought-opening-txt-file-is.html\nCVE-2021-26411 - IE mshtml UAF\nhttps://t.me/cybersecuritytechnologies/2908\nCVE-2021-28918 - SSRF in Netmask package\nhttps://t.me/cybersecuritytechnologies/3014\nCVE-2020-25078 - D-Link psw disclosure\nhttps://t.me/cybersecuritytechnologies/3055\nCVE-2021-1656 - Windows tpm.sys Device Driver Information Disclosure\nhttps://t.me/cybersecuritytechnologies/3028", "url": "https://t.me/CyberSecurityTechnologies/3057"}, {"timestamp": "2022-06-01T02:33:44Z", "date_only": false, "value": "2022-06-01T02:33:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/3007", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3f3b0136-9c36-4a0b-96e4-0d431b8f6ad8", "content": "#Analytics\n10 most exploited vulnerabilities of the week (march 22-28)\nCVE-2021-26855 - ProxyLogon MS Exchange Server RCE\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2021-22986/22987 - F5 BIG-IP TMM uri_normalize_host infoleak/out-of-bounds write\nhttps://t.me/cybersecuritytechnologies/2881\nCVE-2021-1732 - Windows kernel 0-day exploit\nhttps://t.me/cybersecuritytechnologies/2679\nCVE-2021-3449/3450 - OpenSSL DoS/certificate validation\nhttps://t.me/cybersecuritytechnologies/2993\nhttps://thehackernews.com/2021/03/openssl-releases-patches-for-2-high.html\nCVE-2021-26295 - Apache OFBiz unsafe deserialization\nhttps://t.me/cybersecuritytechnologies/2978\nCVE-2020-14179 - JIRA Information Disclosure\nhttps://t.me/cybersecuritytechnologies/2581\nCVE-2020-17453 - XSS In WSO2 Carbon Mgmnt Console\nhttps://t.me/cybersecuritytechnologies/3006\nCVE-2021-21087 - Adobe ColdFusion RCE\nhttps://www.bleepingcomputer.com/news/security/critical-code-execution-vulnerability-fixed-in-adobe-coldfusion", "url": "https://t.me/CyberSecurityTechnologies/3007"}, {"timestamp": "2022-06-03T09:24:05Z", "date_only": false, "value": "2022-06-03T09:24:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsecalert/137", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a7f3d8c0-66b1-416d-b136-ada521cb774a", "content": "\u26a0\ufe0f Atlassian Confluence On-Premise (All recent versions) Remote Code Execution vulnerability!\n\nIf your Confluence is reachable from the Internet, take immediate action and restrict access. This is being exploited in the wild! There is no patch available as of right now.\n\nAffected:  All recent On-Prem Confluence Servers & Data Center\nMore Information (Advisory/Updates): https://yt.gl/f1kcv\n(severity: \ud83d\udd36 very high) \n\n#alert #vulnerability #severityhigh #exchange #CVE-2021-26855 #CVE-2021-26857 #CVE-2021-26858 #CVE-2021-27065.\n\n\u27a1\ufe0f Feel free to discuss this issue in @itsectalk and do your colleagues a favor and forward them this critical vulnerability.", "url": "https://t.me/itsecalert/137"}, {"timestamp": "2022-06-03T09:24:24Z", "date_only": false, "value": "2022-06-03T09:24:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsecalert/135", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d9139c8a-2680-49b3-a835-1532940c0940", "content": "\u26a0\ufe0f Microsoft Exchange Server - GENERAL ADVISORY - UPDATE IMMEDIATELY!\nSeveral new flaws (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065)  have been reported and Microsoft issued an emergency fix. It is reported that the vulnerabilities are actively being exploited.\n\nAffected:  Exchange Server 2013, Exchange Server 2016, and Exchange Server 2019.\n\nMore Information (Advisory/Updates): https://yt.gl/exchangeexp\n\n(severity: \ud83d\udd36 very high) \n\n#alert #vulnerability #severityhigh #atlassian #confluence CVE-2022-26134.\n\n\u27a1\ufe0f Feel free to discuss this issue in @itsectalk and do your colleagues a favor and forward them this critical vulnerability.", "url": "https://t.me/itsecalert/135"}, {"timestamp": "2022-06-28T14:34:58Z", "date_only": false, "value": "2022-06-28T14:34:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3106", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "26d20568-d429-4cdf-9407-01743209aaa4", "content": "\u0421\u0438\u0441\u0442\u0435\u043c\u044b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0434\u0430\u043d\u0438\u0439 (BAS) \u2014 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0440\u0435\u0434\u043a\u0430\u044f \u0446\u0435\u043b\u044c \u0434\u043b\u044f \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0430 \u0438\u0445 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u043d\u043e\u0441\u0438\u0442 \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440.\n\n\u041a\u0430\u043a \u0440\u0430\u0437 \u0441 \u0442\u0430\u043a\u0438\u043c \u0430\u043a\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u0438\u043c\u0435\u0442\u044c \u0434\u0435\u043b\u043e \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u0430\u043c \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e, \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 BAS \u043c\u043e\u0433\u0443\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u0447\u0430\u0441\u0442\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f, \u043f\u043e\u043c\u0438\u043c\u043e \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u044d\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0446\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0432\u044b\u0441\u043e\u043a\u043e\u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430 Kaspersky ICS CERT\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u00a0\u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u044f\u0437\u044b\u0447\u043d\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0438 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u041f\u0430\u043a\u0438\u0441\u0442\u0430\u043d\u0435, \u0410\u0444\u0433\u0430\u043d\u0438\u0441\u0442\u0430\u043d\u0435 \u0438 \u041c\u0430\u043b\u0430\u0439\u0437\u0438\u0438.\n\n\u041f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0435\u0449\u0435 \u0432 \u043c\u0430\u0440\u0442\u0435 2021 \u0433\u043e\u0434\u0430, \u0433\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-26855\u00a0\u0432 Microsoft Exchange \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e ShadowPad \u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0434\u0430\u043d\u0438\u0439.\n\n\u0410\u0442\u0430\u043a\u0438 \u0438\u043c\u0435\u043b\u0438 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 TTP, \u0447\u0442\u043e \u043d\u0430\u0432\u0435\u043b\u043e \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u043e\u0432 \u043d\u0430 \u043c\u044b\u0441\u043b\u044c, \u0447\u0442\u043e \u0437\u0430 \u043d\u0438\u043c\u0438 \u0441\u0442\u043e\u0438\u0442 \u043e\u0434\u043d\u0430 \u0438 \u0442\u0430 \u0436\u0435 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u044f\u0437\u044b\u0447\u043d\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430.\u00a0\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0430\u043a\u0442\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0434\u0430\u043d\u0438\u0439 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0442\u043e\u0447\u043a\u0438 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f. \u0422\u0430\u043a, \u0441 \u043c\u0430\u0440\u0442\u0430 \u043f\u043e \u043e\u043a\u0442\u044f\u0431\u0440\u044c 2021 \u0433\u043e\u0434\u0430 \u0431\u044d\u043a\u0434\u043e\u0440 ShadowPad \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u0441\u044f \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u0436\u0435\u0440\u0442\u0432 \u0432 \u0432\u0438\u0434\u0435 \u0444\u0430\u0439\u043b\u0430 mscoree.dll, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0441\u044f AppLaunch.exe \u2014 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c. \n\n\u041f\u043e\u0437\u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0438 ShadowPad \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 DLL \u0432 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 OLE-COM (OleView). \u041f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432\u0440\u0443\u0447\u043d\u0443\u044e, \u0437\u0430\u0442\u0435\u043c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (cmd.exe).\n\n\u041f\u043e\u0437\u0436\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0434\u043b\u044f cmd.exe \u043f\u043e \u0441\u0435\u0442\u044f\u043c \u0430\u0442\u0430\u043a\u0443\u0435\u043c\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439. \u0421\u043a\u0440\u0438\u043f\u0442 \u0431\u044b\u043b \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u0435\u043d (\u043f\u043e \u0441\u0432\u043e\u0435\u043c\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044e \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u0430\u043d\u0434) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u043d\u0435\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0440\u0443\u0447\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439. \u041e\u043d \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0441\u044f \u043f\u043e \u0441\u0435\u0442\u0438, \u043d\u043e \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u043b\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a \u0437\u0430\u0434\u0430\u0447 \u0434\u043b\u044f \u0435\u0436\u0435\u0434\u043d\u0435\u0432\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f. \n\n\u0412\u0430\u0436\u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u0430 \u0447\u0430\u0441\u0442\u044c \u0422\u0422\u041f \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u0430, \u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u0443\u0435\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u0443\u044e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0441 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0438\u0442\u0430\u0435\u044f\u0437\u044b\u0447\u043d\u043e\u0439 \u0410\u0420\u0422.\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c: CobaltStrike, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0439 \u043d\u0430 \u043c\u0430\u0448\u0438\u043d\u044b-\u0436\u0435\u0440\u0442\u0432\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u0442\u0438\u043b\u0438\u0442\u044b certutil.exe, \u0441\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a aspx, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 procdump \u0438 Mimikatz; \u0431\u044d\u043a\u0434\u043e\u0440 PlugX; BAT-\u0444\u0430\u0439\u043b\u044b (\u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445); \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b (\u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0443), \u0430 \u0442\u0430\u043a\u0436\u0435 Nextnet (\u0434\u043b\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0437\u043b\u043e\u0432).\n\n\u0414\u043b\u044f \u0441\u0432\u044f\u0437\u0438 \u0441 C2 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043e\u043c\u0435\u043d\u044b, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 NameSilo, GoDaddy.com \u0438 ENOM. \u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e C2 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u043b\u0438\u0441\u044c \u043d\u0430 \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Choopa.\n\n\u041f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0430\u0442\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 APT, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a\u00a0Hafnium, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b Exchange ProxyLogon. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u044c \u043e \u043f\u0440\u0438\u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 HAFNUM \u043a \u0430\u0442\u0430\u043a\u0430\u043c, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.\n\n\u041a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0446\u0435\u043b\u044c \u0430\u043a\u0442\u043e\u0440\u0430 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u0430\u043c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c, \u043e\u0434\u043d\u0430\u043a\u043e, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0433\u0440\u0443\u043f\u043f\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u0431\u043e\u0440 \u0434\u0430\u043d\u043d\u044b\u0445. Kaspersky ICS CERT \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0430\u043a\u0442\u043e\u0440 \u043c\u043e\u0436\u0435\u0442 \u0438\u043c\u0435\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u0438\u0435 \u0433\u0435\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u044b \u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0441\u043f\u0438\u0441\u043e\u043a \u0436\u0435\u0440\u0442\u0432.", "url": "https://t.me/true_secator/3106"}, {"timestamp": "2022-06-29T12:17:46Z", "date_only": false, "value": "2022-06-29T12:17:46.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ics_cert/553", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "76af4a4c-78cf-4479-8b65-5902cf43bf22", "content": "\u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0633\u0627\u062e\u062a\u0645\u0627\u0646 (BAS) \u06cc\u06a9 \u0647\u062f\u0641 \u0646\u0633\u0628\u062a\u0627\u064b \u0646\u0627\u062f\u0631 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u067e\u06cc\u0634\u0631\u0641\u062a\u0647 \u0647\u0633\u062a\u0646\u062f \u0648 \u0628\u0647 \u062e\u0637\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u0622\u0646\u0647\u0627 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u062a\u0635\u0627\u062f\u0641\u06cc \u0627\u0633\u062a.\n\n\u0628\u0631 \u0627\u0633\u0627\u0633 \u0622\u0646 \u0647\u06a9\u0631\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0647\u06a9 \u06a9\u0631\u062f\u0646 BAS\u060c \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0633\u0627\u06cc\u0631 \u0628\u062e\u0634 \u0647\u0627\u06cc \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0647\u062f\u0641 \u0627\u0632 \u062c\u0645\u0644\u0647\u060c \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062e\u0648\u062f \u0631\u0627 \u0628\u0647 \u062e\u0637\u0631 \u0628\u06cc\u0627\u0646\u062f\u0627\u0632\u0646\u062f.  \u0639\u0644\u0627\u0648\u0647 \u0628\u0631 \u0627\u06cc\u0646\u060c \u0627\u06cc\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0645\u0646\u0628\u0639 \u0627\u0631\u0632\u0634\u0645\u0646\u062f\u06cc \u0627\u0632 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u0633\u06cc\u0627\u0631 \u062d\u0633\u0627\u0633 \u0628\u0627\u0634\u0646\u062f.\n\n \u062f\u0631 \u0627\u06a9\u062a\u0628\u0631 2021\u060c Kaspersky \u06cc\u06a9 \u0645\u0647\u0627\u062c\u0645 \u0686\u06cc\u0646\u06cc \u0632\u0628\u0627\u0646 \u0642\u0628\u0644\u0627\u064b \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647 \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f \u06a9\u0647 \u0628\u0647 \u0633\u0627\u0632\u0645\u0627\u0646 \u0647\u0627\u06cc \u0645\u062e\u0627\u0628\u0631\u0627\u062a\u06cc\u060c \u062a\u0648\u0644\u06cc\u062f\u06cc \u0648 \u062d\u0645\u0644 \u0648 \u0646\u0642\u0644 \u062f\u0631 \u067e\u0627\u06a9\u0633\u062a\u0627\u0646\u060c \u0627\u0641\u063a\u0627\u0646\u0633\u062a\u0627\u0646 \u0648 \u0645\u0627\u0644\u0632\u06cc \u062d\u0645\u0644\u0647 \u0645\u06cc \u06a9\u0631\u062f.\n\n \u0638\u0627\u0647\u0631\u0627\u064b \u0645\u0648\u062c \u062d\u0645\u0644\u0627\u062a \u0627\u0632 \u0627\u0648\u0627\u06cc\u0644 \u0645\u0627\u0631\u0633 2021 \u0622\u063a\u0627\u0632 \u0634\u062f\u060c \u0627\u06cc\u0646 \u06af\u0631\u0648\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-26855 \u062f\u0631 Microsoft Exchange \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u0642\u0631\u0627\u0631 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 ShadowPad \u0648 \u0646\u0641\u0648\u0630 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0633\u0627\u062e\u062a\u0645\u0627\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f.\n\n \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a \u062f\u0627\u0631\u0627\u06cc \u0645\u062c\u0645\u0648\u0639\u0647 \u0645\u0646\u062d\u0635\u0631\u0628\u0641\u0631\u062f\u06cc \u0627\u0632 TTP\u0647\u0627 \u0628\u0648\u062f \u06a9\u0647 \u0645\u062d\u0642\u0642\u0627\u0646 \u0631\u0627 \u0628\u0647 \u0627\u06cc\u0646 \u0628\u0627\u0648\u0631 \u0631\u0633\u0627\u0646\u062f \u06a9\u0647 \u0647\u0645\u0627\u0646 \u062a\u0647\u062f\u06cc\u062f \u0628\u0647 \u0632\u0628\u0627\u0646 \u0686\u06cc\u0646\u06cc \u062f\u0631 \u067e\u0634\u062a \u0622\u0646\u0647\u0627 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f.  \u062f\u0631 \u0647\u0645\u0627\u0646 \u0632\u0645\u0627\u0646\u060c \u0627\u06cc\u0646 \u0628\u0627\u0632\u06cc\u06af\u0631 \u0627\u0632 \u06a9\u0627\u0645\u067e\u06cc\u0648\u062a\u0631\u0647\u0627\u06cc \u0645\u0647\u0646\u062f\u0633\u06cc \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0633\u0627\u062e\u062a\u0645\u0627\u0646 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0646\u0642\u0637\u0647 \u0648\u0631\u0648\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f.\n\n \u062f\u0631 \u0637\u0648\u0644 \u0628\u0631\u0631\u0633\u06cc\u060c \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0628\u0632\u0627\u0631\u0647\u0627 \u0648 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u06cc\u06af\u0631\u06cc \u0631\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0646\u062f \u06a9\u0647 \u0645\u0647\u0627\u062c\u0645 \u067e\u0633 \u0627\u0632 \u0639\u0641\u0648\u0646\u062a \u0627\u0648\u0644\u06cc\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0631\u062f.  \u0628\u0646\u0627\u0628\u0631\u0627\u06cc\u0646\u060c \u0627\u0632 \u0645\u0627\u0631\u0633 \u062a\u0627 \u0627\u06a9\u062a\u0628\u0631 2021\u060c \u062f\u0631\u0628 \u067e\u0634\u062a\u06cc ShadowPad \u062f\u0631 \u0642\u0627\u0644\u0628 \u0641\u0627\u06cc\u0644 mscoree.dll \u06a9\u0647 \u062a\u0648\u0633\u0637 AppLaunch.exe\u060c \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u06a9\u0627\u0645\u0644\u0627\u064b \u0642\u0627\u0646\u0648\u0646\u06cc\u060c \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0634\u062f\u0647 \u0628\u0648\u062f\u060c \u062f\u0631 \u0631\u0627\u06cc\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc\u0627\u0646 \u062f\u0627\u0646\u0644\u0648\u062f \u0634\u062f.\n\n \u0628\u0639\u062f\u0627\u064b\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 ShadowPad \u0631\u0627 \u0628\u0627 \u0631\u0647\u06af\u06cc\u0631\u06cc \u06cc\u06a9 DLL \u062f\u0631 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647 \u0642\u0627\u0646\u0648\u0646\u06cc \u0628\u0631\u0627\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u0627\u0634\u06cc\u0627\u0621 OLE-COM (OleView) \u0631\u0627\u0647 \u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0631\u062f\u0646\u062f.  \u067e\u0633 \u0627\u0632 \u0622\u0644\u0648\u062f\u06af\u06cc \u0627\u0648\u0644\u06cc\u0647\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0628\u062a\u062f\u0627 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u0631\u0627 \u0628\u0647 \u0635\u0648\u0631\u062a \u062f\u0633\u062a\u06cc \u0648 \u0633\u067e\u0633 \u0628\u0647 \u0637\u0648\u0631 \u062e\u0648\u062f\u06a9\u0627\u0631 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0631\u0627\u0628\u0637 \u062e\u0637 \u0641\u0631\u0645\u0627\u0646 (cmd.exe) \u0627\u0631\u0633\u0627\u0644 \u06a9\u0631\u062f\u0646\u062f.\n\n \u0628\u0639\u062f\u0627\u064b\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0634\u0631\u0648\u0639 \u0628\u0647 \u062a\u0648\u0632\u06cc\u0639 \u06cc\u06a9 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0645\u062e\u0631\u0628 \u0628\u0631\u0627\u06cc cmd.exe \u062f\u0631 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627\u06cc \u062a\u062d\u062a \u062d\u0645\u0644\u0647 \u06a9\u0631\u062f\u0646\u062f.  \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u062a\u0642\u0631\u06cc\u0628\u0627\u064b \u06a9\u0627\u0645\u0644\u0627\u064b \u06cc\u06a9\u0633\u0627\u0646 \u0628\u0648\u062f (\u0627\u0632 \u0646\u0638\u0631 \u0645\u062d\u062a\u0648\u0627 \u0648 \u062a\u0631\u062a\u06cc\u0628 \u062f\u0633\u062a\u0648\u0631\u0627\u062a) \u0628\u0627 \u062a\u0648\u0627\u0644\u06cc \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062f\u0633\u062a\u06cc \u06a9\u0647 \u0642\u0628\u0644\u0627\u064b \u06a9\u0634\u0641 \u0634\u062f\u0647 \u0628\u0648\u062f.  \u0646\u0647 \u062a\u0646\u0647\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0634\u0628\u06a9\u0647 \u062a\u062d\u0648\u06cc\u0644 \u062f\u0627\u062f\u0647 \u0634\u062f\u060c \u0628\u0644\u06a9\u0647 \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0646\u06cc\u0632 \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u0631\u0648\u0632\u0627\u0646\u0647 \u0628\u0647 \u0628\u0631\u0646\u0627\u0645\u0647 \u0632\u0645\u0627\u0646\u0628\u0646\u062f\u06cc \u0648\u0638\u0627\u06cc\u0641 \u0627\u0636\u0627\u0641\u0647 \u0634\u062f.\n\n \u062a\u0648\u062c\u0647 \u0628\u0647 \u0627\u06cc\u0646 \u0646\u06a9\u062a\u0647 \u0645\u0647\u0645 \u0627\u0633\u062a \u06a9\u0647 \u0627\u06cc\u0646 \u0628\u062e\u0634 \u0627\u0632 TTP \u0627\u0633\u062a \u06a9\u0647 \u06a9\u0627\u0645\u0644\u0627\u064b \u0645\u0646\u062d\u0635\u0631 \u0628\u0647 \u0641\u0631\u062f \u0627\u0633\u062a \u0648 \u0641\u0639\u0627\u0644\u06cc\u062a \u0647\u0627\u06cc \u0645\u0634\u0627\u0628\u0647 \u0631\u0627 \u0628\u0647 ART \u0686\u06cc\u0646\u06cc \u0632\u0628\u0627\u0646 \u0642\u0628\u0644\u0627\u064b \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647 \u0646\u0633\u0628\u062a \u0645\u06cc \u062f\u0647\u062f.\n\n \u0633\u0627\u06cc\u0631 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0639\u0628\u0627\u0631\u062a\u0646\u062f \u0627\u0632: CobaltStrike\u060c \u062f\u0627\u0646\u0644\u0648\u062f \u0634\u062f\u0647 \u062f\u0631 \u0645\u0627\u0634\u06cc\u0646 \u0647\u0627\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631 certutil.exe\u060c \u0628\u0633\u062a\u0647 \u0628\u0646\u062f\u06cc \u0647\u0627\u06cc \u0648\u0628 aspx \u06a9\u0627\u0645\u067e\u0627\u06cc\u0644 \u0634\u062f\u0647\u060c \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc procdump \u0648 Mimikatz.  \u062f\u0631\u0628 \u067e\u0634\u062a\u06cc PlugX.  \u0641\u0627\u06cc\u0644 \u0647\u0627\u06cc BAT (\u0628\u0631\u0627\u06cc \u0633\u0631\u0642\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0627\u0639\u062a\u0628\u0627\u0631\u06cc)\u061b  \u067e\u0648\u0633\u062a\u0647 \u0647\u0627\u06cc \u0648\u0628 (\u0628\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u0633\u0631\u0648\u0631 \u0648\u0628)\u060c \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 Nextnet (\u0628\u0631\u0627\u06cc \u0627\u0633\u06a9\u0646 \u06af\u0631\u0647 \u0647\u0627\u06cc \u0634\u0628\u06a9\u0647).\n\n \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u062f\u0627\u0645\u0646\u0647 \u0647\u0627\u06cc \u062b\u0628\u062a \u0634\u062f\u0647 \u062f\u0631 NameSilo\u060c GoDaddy.com \u0648 ENOM \u0628\u0631\u0627\u06cc \u062a\u0645\u0627\u0633 \u0628\u0627 C2 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0646\u062f.  \u0628\u06cc\u0634\u062a\u0631 C2 \u0647\u0627 \u0631\u0648\u06cc \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0627\u062e\u062a\u0635\u0627\u0635\u06cc \u0627\u062c\u0627\u0631\u0647 \u0627\u06cc Choopa \u0645\u06cc\u0632\u0628\u0627\u0646\u06cc \u0645\u06cc \u0634\u062f\u0646\u062f.\n\n \u062f\u0631 \u062d\u06cc\u0646 \u062a\u062c\u0632\u06cc\u0647 \u0648 \u062a\u062d\u0644\u06cc\u0644 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a\u060c \u0645\u062d\u0642\u0642\u0627\u0646 \u0645\u0637\u0627\u0628\u0642 \u0628\u0627 \u06cc\u06a9 APT \u0686\u06cc\u0646\u06cc \u062f\u06cc\u06af\u0631 \u06a9\u0647 \u0628\u0647 \u0646\u0627\u0645 Hafnium \u0631\u062f\u06cc\u0627\u0628\u06cc \u0634\u062f\u0647 \u0628\u0648\u062f\u060c \u06cc\u0627\u0641\u062a\u0646\u062f \u06a9\u0647 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0627\u0632 \u0627\u06a9\u0633\u067e\u0644\u0648\u06cc\u062a \u0647\u0627\u06cc Exchange ProxyLogon \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u062f.  \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u0627\u0628\u0632\u0627\u0631 \u0627\u0631\u0627\u0626\u0647 \u0634\u062f\u0647 \u0628\u0631\u0627\u06cc \u0635\u062d\u0628\u062a \u062f\u0631 \u0645\u0648\u0631\u062f \u062f\u062e\u0627\u0644\u062a HAFNUM \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u062a\u0648\u0635\u06cc\u0641 \u0634\u062f\u0647 \u062f\u0631 \u06af\u0632\u0627\u0631\u0634 \u06a9\u0627\u0641\u06cc \u0646\u06cc\u0633\u062a.\n\n \u0645\u062d\u0642\u0642\u0627\u0646 \u0646\u062a\u0648\u0627\u0646\u0633\u062a\u0646\u062f \u0647\u062f\u0641 \u0646\u0647\u0627\u06cc\u06cc \u0628\u0627\u0632\u06cc\u06af\u0631 \u0631\u0627 \u062a\u0639\u06cc\u06cc\u0646 \u06a9\u0646\u0646\u062f\u060c \u0627\u0645\u0627 \u0638\u0627\u0647\u0631\u0627\u064b \u0647\u062f\u0641 \u0627\u06cc\u0646 \u06af\u0631\u0648\u0647 \u062c\u0645\u0639 \u0622\u0648\u0631\u06cc \u062f\u0627\u062f\u0647 \u0647\u0627 \u0627\u0633\u062a.  Kaspersky \u0645\u0639\u062a\u0642\u062f \u0627\u0633\u062a \u06a9\u0647 \u0627\u06cc\u0646 \u0628\u0627\u0632\u06cc\u06af\u0631 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0639\u0644\u0627\u06cc\u0642 \u062c\u063a\u0631\u0627\u0641\u06cc\u0627\u06cc\u06cc \u06af\u0633\u062a\u0631\u062f\u0647\u200c\u062a\u0631\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f \u0648 \u0628\u0631 \u0627\u06cc\u0646 \u0627\u0633\u0627\u0633\u060c \u0641\u0647\u0631\u0633\u062a\u06cc \u0627\u0632 \u0642\u0631\u0628\u0627\u0646\u06cc\u0627\u0646 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "url": "https://t.me/ics_cert/553"}, {"timestamp": "2022-09-30T08:50:28Z", "date_only": false, "value": "2022-09-30T08:50:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b7effe8d-f245-44fd-94ef-5f2f693cfb06", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c45ce9b6-d418-452f-93b2-b0099a0baa5f"}, {"timestamp": "2022-10-03T09:38:30Z", "date_only": false, "value": "2022-10-03T09:38:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/ul3bLP6M8N0jTgt2NeUEWg-ibEsZS_pJydaLwgYZDUKk4H7a", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "69e61103-309b-48c9-95ac-2684cf1f3533"}, {"timestamp": "2022-10-03T15:07:05Z", "date_only": false, "value": "2022-10-03T15:07:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/TiPkzFUdxFfD3CIf_uZqLZ4zP7L29fawhiQ-SS_LUGPjA6w", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "47aec639-e75a-49c5-b810-34cfbcd31251"}, {"timestamp": "2022-10-27T20:30:22Z", "date_only": false, "value": "2022-10-27T20:30:22.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/90e532fb-4efa-4ff2-95ab-ddaf25454791", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3e610639-9609-4fe7-8fab-35a4a58d6119"}, {"timestamp": "2022-10-31T10:29:10Z", "date_only": false, "value": "2022-10-31T10:29:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/507", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d23d9dbd-3b7a-489c-9d0c-e5d5f6f22d3c", "content": "CVE-2021-26855: #Microsoft #Exchange #Server-Side Request Forgery\n\nhttps://github.com/googleprojectzero/0days-in-the-wild/blob/main/0day-RCAs/2021/CVE-2021-26855.md", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/507"}, {"timestamp": "2023-09-20T10:42:09Z", "date_only": false, "value": "2023-09-20T10:42:09.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/cec219ff-8f6d-45c9-bdbb-b4fb8c9c0f2b", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2947bca8-86b2-4f23-b7a8-19fbffd3d048"}, {"timestamp": "2023-09-21T09:23:10Z", "date_only": false, "value": "2023-09-21T09:23:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/avleonovrus/54", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f4451be1-0810-4f56-9db0-70c2e09a9d01", "content": "\u0412 \u0442\u043e\u043c \u0436\u0435 \u043e\u0442\u0447\u0435\u0442\u0435 Palo Alto 2022 Unit 42 Incident Response Report \u0435\u0441\u0442\u044c \u0435\u0449\u0451 \u043e\u0434\u0438\u043d \u043f\u0440\u0438\u043a\u043e\u043b\u044c\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442. \u0413\u0440\u0443\u043f\u043f\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u043b\u043e\u043c\u0430\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \"\u0412 \u0441\u043b\u0443\u0447\u0430\u044f\u0445, \u043a\u043e\u0433\u0434\u0430 \u0440\u0435\u0441\u043f\u043e\u043d\u0434\u0435\u043d\u0442\u044b \u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0431\u043e\u043b\u0435\u0435 87% \u0438\u0437 \u043d\u0438\u0445 \u043f\u043e\u043f\u0430\u043b\u0438 \u0432 \u043e\u0434\u043d\u0443 \u0438\u0437 \u0448\u0435\u0441\u0442\u0438 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0439 CVE\".\n\n\u041a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438: \n\n\u2022 55% Microsoft Exchange ProxyShell (CVE-2021-34473, CVE-2021-34523, CVE-2021-31207)\n\u2022 14% Log4j\n\u2022 7% SonicWall CVEs\n\u2022 5% Microsoft Exchange ProxyLogon (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065)\n\u2022 4% Zoho ManageEngine ADSelfService Plus (CVE-2021-40539)\n\u2022 3% Fortinet CVEs\n\n\u2022 13% Other\n\n\u0421 \u043e\u0434\u043d\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u044d\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0434\u043b\u044f \u043e\u0431\u0449\u0438\u0445 \u0440\u0430\u0437\u043c\u044b\u0448\u043b\u0435\u043d\u0438\u0439 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u0430\u043a\u043e\u043c \u0441\u043e\u0444\u0442\u0435 \u0441\u0442\u043e\u0438\u0442 \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435. \u041d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0437 Other \u044f \u0431\u044b \u0442\u043e\u0436\u0435 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u043b, \u043d\u043e \u0438\u0445 \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e \u043d\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435. \n\n\u0421 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u044d\u0442\u043e \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0442\u0435\u043c\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430. \u041d\u0443 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c Exchange \u0432\u0435\u0437\u0434\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442, \u044d\u0442\u043e \u0434\u0430. Log4j \u0442\u0430\u043a\u0436\u0435 \u0432\u0441\u0435\u0445 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b \u0442\u0430\u043a \u0438\u043b\u0438 \u0438\u043d\u0430\u0447\u0435. \u041c\u043e\u0436\u043d\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u044c, \u0447\u0442\u043e \u0432 \u043d\u0430\u0448\u0438\u0445 \u0448\u0438\u0440\u043e\u0442\u0430\u0445 \u043a\u043e\u0435-\u043a\u0442\u043e \u043a\u0440\u0435\u043f\u043a\u043e \u0441\u0438\u0434\u0438\u0442 \u043d\u0430 Fortinet. \u041d\u043e \u0432\u043e\u0442 SonicWall \u0438 Zoho \u043a\u0430\u0436\u0443\u0442\u0441\u044f \u0447\u0435\u043c-\u0442\u043e \u0441\u043e\u0432\u0441\u0435\u043c \u044d\u043a\u0437\u043e\u0442\u0438\u0447\u043d\u044b\u043c. \u0410 \u0442\u0430\u043c, \u0433\u0434\u0435 Unit 42  incident response \u043a\u0435\u0439\u0441\u044b \u0440\u0435\u0448\u0430\u0435\u0442, \u044d\u0442\u043e \u043e\u0447\u0435\u043d\u044c \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0448\u0442\u0443\u043a\u0438. \u0418\u043b\u0438 \u0432\u0441\u043f\u043e\u043c\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u044e\u044e \u044d\u043f\u043e\u043f\u0435\u044e, \u043a\u043e\u0433\u0434\u0430  \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u043e\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Kaseya VSA. \u0411\u043e\u043b\u044c\u0448\u0435 \u0442\u044b\u0441\u044f\u0447\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0438, \u043d\u043e \u043e\u043f\u044f\u0442\u044c \u0436\u0435 \u044d\u0442\u043e \u043d\u0435 \u0432 \u043d\u0430\u0448\u0435\u043c \u0440\u0435\u0433\u0438\u043e\u043d\u0435, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0430\u043c \u043d\u0435 \u043e\u0441\u043e\u0431\u043e \u044d\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e \u0431\u044b\u043b\u043e. \n\n\u0421 \u0443\u0447\u0435\u0442\u043e\u043c \u0438\u0441\u0445\u043e\u0434\u0430 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u0445 \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432 \u0441 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0440\u044b\u043d\u043a\u0430 IT \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u044b \"\u0437\u0434\u0435\u0441\u044c\" \u0438 \"\u0442\u0430\u043c\" \u0431\u0443\u0434\u0443\u0442 \u0432\u0441\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u0430\u0442\u044c\u0441\u044f. \u0418 \u0432\u0441\u0435 \u0431\u043e\u043b\u044c\u0448\u0443\u044e \u0440\u043e\u043b\u044c \u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445 \u0431\u0443\u0434\u0443\u0442 \u0438\u0433\u0440\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u043e\u0444\u0442\u0435, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u0435 \u0418\u0411 \u0432\u0435\u043d\u0434\u043e\u0440\u044b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0438 \u043d\u0435 \u0441\u043b\u044b\u0448\u0430\u043b\u0438 \u043d\u0438\u043a\u043e\u0433\u0434\u0430. \u0418 \u044d\u0442\u043e \u0432 \u043e\u0431\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442. \u0417\u043d\u0430\u0447\u0438\u0442 \u043b\u0438 \u044d\u0442\u043e, \u0447\u0442\u043e \u0438 Vulnerability Management \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043d\u0430\u043c \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u044f\u0442\u0441\u044f \u0432\u0441\u0435 \u0431\u043e\u043b\u0435\u0435 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u0442\u043e\u0447\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0434 \u043d\u0430\u0448\u0438 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u0440\u0435\u0430\u043b\u0438\u0438? \u041d\u0443 \u0432\u0438\u0434\u0438\u043c\u043e \u0434\u0430. \n\n\u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u0432\u0440\u0435\u043c\u044f \u0431\u0435\u0437\u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0439 \u0433\u043b\u043e\u0431\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 IT \u0443\u0445\u043e\u0434\u0438\u0442, \u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u0442\u0435\u043c \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 VM-\u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 \u043d\u043e\u0432\u044b\u0445 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445. \u0427\u0442\u043e \u043f\u043e\u0434\u0435\u043b\u0430\u0442\u044c.\n\n@avleonovrus #VMnews #PaloAlto", "url": "https://t.me/avleonovrus/54"}, {"timestamp": "2023-10-13T16:08:44Z", "date_only": false, "value": "2023-10-13T16:08:44+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2021-26855", "field": "timestamps.asserted_at", "uuid": "246a4b42-70d9-4f6b-ae8b-12ee124156cc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-13T16:08:44Z", "date_only": false, "value": "2023-10-13T16:08:44+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-26855", "field": "timestamps.first_seen_at", "uuid": "246a4b42-70d9-4f6b-ae8b-12ee124156cc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-05T03:49:05Z", "date_only": false, "value": "2023-12-05T03:49:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/20248", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "665b3b7f-00a8-48bc-9062-cde1b3170758", "content": "\u0414\u0435\u0441\u044f\u0442\u043a\u0438 \u0442\u044b\u0441\u044f\u0447 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043f\u0435\u0440\u0435\u0434 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u2328\ufe0f\n\n\u25aa\ufe0f \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u0440\u043e\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 20 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange \u0441\u043e \u0441\u0442\u0430\u0440\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 \u041f\u041e. \u0411\u043e\u043b\u0435\u0435 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u0438\u0437 \u043d\u0438\u0445 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0415\u0432\u0440\u043e\u043f\u0435.\n\n\u25ab\ufe0f \u041f\u043e \u0434\u0440\u0443\u0433\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0432 \u0441\u0435\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0443\u0436\u0435 30 000 \u0442\u0430\u043a\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \u041e\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0431\u0430\u0433\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\n\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043c\u0430\u0448\u0438\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043f\u0435\u0440\u0435\u0434 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 ProxyLogon (CVE-2021-26855), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0430 \u0441 \u043c\u0435\u043d\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 (CVE-2021-27065) \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \u041d\u0435 \u043c\u0435\u043d\u0435\u0435 1800 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Exchange \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043f\u0435\u0440\u0435\u0434 ProxyLogon, ProxyShell \u0438 ProxyToken.\n\n\u2705 \u0414\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c, \u0434\u043e\u0441\u0442\u0438\u0433\u0448\u0438\u0445 \u043a\u043e\u043d\u0446\u0430 \u0441\u0440\u043e\u043a\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438, \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u0441\u0435 \u0435\u0449\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/20248"}, {"timestamp": "2023-12-13T01:23:33.463Z", "date_only": false, "value": "2023-12-13T01:23:33.463661Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-26855", "record": "GSD-2021-26855", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-10T16:40:02Z", "date_only": false, "value": "2024-01-10T16:40:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/77274b68-8fd7-43b8-b7d6-df4609389595", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "18cbc497-0095-471c-993c-ea31357a88b8"}, {"timestamp": "2024-02-15T20:18:22.123Z", "date_only": false, "value": "2024-02-15T20:18:22.123", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-26855", "record": "GSD-2021-26855", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-27T17:23:06Z", "date_only": false, "value": "2024-02-27T17:23:06.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/dbed03e0-eb16-4f8b-87aa-f080ca118e91", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "12af3e17-8aba-431f-bc14-ec0b6240b0d1"}, {"timestamp": "2024-03-15T08:58:02Z", "date_only": false, "value": "2024-03-15T08:58:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pt_soft/243", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b943d02b-bc52-423b-a1cb-d7c7f3595242", "content": "\ud83d\uddbc\ufe0f Moriarty v1.1\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f // Pentest HaT \ud83c\udfa9", "url": "https://t.me/pt_soft/243"}, {"timestamp": "2024-05-03T09:04:40Z", "date_only": false, "value": "2024-05-03T09:04:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pt_soft/270", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "29145386-92a2-4a01-9788-224e691ef380", "content": "\ud83d\uddbc\ufe0f \ud83d\udd04 Moriarty v1.2\n\n\u0427\u0435\u043a\u0435\u0440 CVEs \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C# \u0434\u043b\u044f \u041e\u0421 \ud83c\udfe0 Windows\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438:\nWindows 10 (Versions: 1507, 1511, 1607, 1703, 1709, 1803, 1809, 1903, 1909, 2004, 20H2, 21H1, 21H2, 22H1, 22H2)\nWindows 11 (Versions: 21H2, 22H1, 22H2, 23H1)\nWindows Server 2016, 2019, 2022\n\n\u0421\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (35):\nMS10-015\nMS10-092\nMS13-053\nMS13-081\nMS14-058\nMS15-051\nMS15-078\nMS16-016\nMS16-032\nMS16-034\nMS16-135\nCVE-2017-7199\nCVE-2019-0836\nCVE-2019-0836\nCVE-2019-1064\nCVE-2019-1130\nCVE-2019-1253\nCVE-2019-1315\nCVE-2019-1385\nCVE-2019-1388\nCVE-2019-1405\nCVE-2020-0668\nCVE-2020-0683\nCVE-2020-0796\nCVE-2020-1013\nCVE-2020-1013\nCVE-2021-26855\nCVE-2021-26857\nCVE-2021-26858\nCVE-2021-27065\nCVE-2021-44228\nCVE-2021-36934\nCVE-2022-40140\nCVE-2022-22965\nCVE-2023-36664\n\n1.2 added:\n2023-23397\n2022-34718\n\n\ud83d\udc49 \u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u043e\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e CVE\n\n!poc CVE-2019-1064\n\n\ud83d\udcbb Home\n\n\u0414\u043b\u044f \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u0442\u0441\u044f Visual Studio \u0438 .NET Framework 4.8 Developer Pack\n\n#moriarty #checker #csharp\n\n\u2708\ufe0f // Pentest HaT \ud83c\udfa9", "url": "https://t.me/pt_soft/270"}, {"timestamp": "2024-05-23T17:26:48Z", "date_only": false, "value": "2024-05-23T17:26:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/c8d62b22-305f-4f45-8e36-1b13aeaf27d1", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "28036c39-e3e8-421b-8635-d84defd7b669"}, {"timestamp": "2024-08-03T20:33:40.999Z", "date_only": false, "value": "2024-08-03T20:33:40.999Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-26855", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-14T07:14:24Z", "date_only": false, "value": "2024-10-14T07:14:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2865", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d194d4fa-d240-4fd5-b35e-3df6b393d05b", "content": "#Analytics\n10 most exploited vulnerabilities of the week (march 2-8)\n\nCVE-2020-1350 - Exploit SIGRed/Windows DNS Server RCE\nCVE-2021-21972 - VMware vCenter RCE (PoC1, PoC2, PoC3)\nCVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065 - ProxyLogon MS Exchange Server RCE\nCVE-2021-21166 - Chrome Audio RCE\nCVE-2021-21978 - VMware View Planner\u00a0RCE\nCVE-2021-21315 - Node.JS OS sanitize service Parameters Command Injection\nCVE-2021-23132 - RCE in Joomla core <=3.9.24", "url": "https://t.me/CyberSecurityTechnologies/2865"}, {"timestamp": "2024-10-24T00:00:00Z", "date_only": false, "value": "2024-10-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "511b0f9d-00ec-44cc-958d-297654237833"}, {"timestamp": "2024-10-25T00:00:00Z", "date_only": false, "value": "2024-10-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c0f9c85d-d295-4429-b7e4-33bef5e2ce6b"}, {"timestamp": "2024-10-26T00:00:00Z", "date_only": false, "value": "2024-10-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d6bca868-a62e-4b9a-8c06-27f3e9f308ee"}, {"timestamp": "2024-10-27T00:00:00Z", "date_only": false, "value": "2024-10-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7c4ec8ab-5e81-4bb5-aa6e-c7af90b11c13"}, {"timestamp": "2024-10-28T00:00:00Z", "date_only": false, "value": "2024-10-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a2af13ce-08de-4d91-9625-b6876828bcd5"}, {"timestamp": "2024-10-29T00:00:00Z", "date_only": false, "value": "2024-10-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8e04b7f4-5513-465e-be45-b163f7424428"}, {"timestamp": "2024-10-30T00:00:00Z", "date_only": false, "value": "2024-10-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "666c2d28-486c-465f-a5ea-614f6a1d79bb"}, {"timestamp": "2024-11-01T00:00:00Z", "date_only": false, "value": "2024-11-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "315529e9-d60a-472c-b1fc-e298c22818d7"}, {"timestamp": "2024-11-04T00:00:00Z", "date_only": false, "value": "2024-11-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "fedde9bb-6568-4306-98d7-40dc50a2f377"}, {"timestamp": "2024-11-05T00:00:00Z", "date_only": false, "value": "2024-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ad66de2b-6df4-41f1-b362-b45e1a5b59b4"}, {"timestamp": "2024-11-07T00:00:00Z", "date_only": false, "value": "2024-11-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ea439d70-56b3-4387-98ab-c876577088b0"}, {"timestamp": "2024-11-08T00:00:00Z", "date_only": false, "value": "2024-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d2bf3004-a3cd-403f-8db3-16ceb2aac2da"}, {"timestamp": "2024-11-11T00:00:00Z", "date_only": false, "value": "2024-11-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "fd87a936-1cde-4c24-9067-47255b5347a0"}, {"timestamp": "2024-11-13T00:00:00Z", "date_only": false, "value": "2024-11-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "548ba99b-86e8-4bc3-ae0e-bf65de4bce40"}, {"timestamp": "2024-11-14T00:00:00Z", "date_only": false, "value": "2024-11-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5fccf089-14cb-4d4a-8785-8e5082e76109"}, {"timestamp": "2024-11-15T00:00:00Z", "date_only": false, "value": "2024-11-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "36a94116-f175-4de6-a7b4-3ccf26e11670"}, {"timestamp": "2024-11-16T00:00:00Z", "date_only": false, "value": "2024-11-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "772d5ecf-df25-4b58-ba56-a7fab6b2a1a7"}, {"timestamp": "2024-11-17T00:00:00Z", "date_only": false, "value": "2024-11-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ebc40985-f0f3-462b-ad4c-40b4b8f92742"}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9504c44e-4e7e-41cc-9199-b7733d4dc4d8"}, {"timestamp": "2024-11-20T00:00:00Z", "date_only": false, "value": "2024-11-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "cb7203ff-d298-48cf-b4bd-3bb649a92c26"}, {"timestamp": "2024-11-21T00:00:00Z", "date_only": false, "value": "2024-11-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c1ff0e4a-2ec5-469f-bb8e-8032213f3091"}, {"timestamp": "2024-11-22T00:00:00Z", "date_only": false, "value": "2024-11-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "04ecdb06-4eb0-4ab5-a3a3-8ae64d2d96a7"}, {"timestamp": "2024-11-22T00:00:00Z", "date_only": false, "value": "2024-11-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-11-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "744a839e-90dd-4bb2-86d0-177e1582c71a"}, {"timestamp": "2024-11-23T00:00:00Z", "date_only": false, "value": "2024-11-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "205c83c8-b85d-4cb1-b67a-62dc2e05ad88"}, {"timestamp": "2024-11-24T00:00:00Z", "date_only": false, "value": "2024-11-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "75db23b2-b980-4383-8f91-46b981a7bd07"}, {"timestamp": "2024-11-24T00:00:00Z", "date_only": false, "value": "2024-11-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2024-11-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7dda21c9-54c1-42d9-a62c-a5fabfecafea"}, {"timestamp": "2024-11-25T00:00:00Z", "date_only": false, "value": "2024-11-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8fe10aa8-3203-4e30-943a-5e36815f3280"}, {"timestamp": "2024-11-26T00:00:00Z", "date_only": false, "value": "2024-11-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b46b3721-df93-4c80-a8a8-bf9749a1331c"}, {"timestamp": "2024-11-26T13:40:05Z", "date_only": false, "value": "2024-11-26T13:40:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/6473", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "edcdad5e-736e-4ac6-b096-4585163950b7", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Trend Micro \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 GhostSpider, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0441\u044f Salt Typhoon (Earth Estries, GhostEmperor \u0438\u043b\u0438 UNC2286) \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433.\n\n\u041f\u043e\u043c\u0438\u043c\u043e GhostSpider Salt Typhoon \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043d\u0430\u0431\u043e\u0440 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0438 \u0441\u0442\u0440\u043e\u0433\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u043c\u043d\u043e\u0433\u043e\u044d\u0442\u0430\u043f\u043d\u044b\u0445 \u0430\u0442\u0430\u043a: SNAPPYBEE (Deed RAT), SparrowDoor, CrowDoor \u0438 MASOL RAT \u0434\u043b\u044f Linux, \u0440\u0443\u0442\u043a\u0438\u0442 DEMODEX, ShadowPad, NeoReGeorg, frpc\u00a0\u0438 Cobalt Strike.\n\nSalt Typhoon - \u044d\u0442\u043e \u0441\u043b\u043e\u0436\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 2019 \u0433\u043e\u0434\u0430 \u0438 \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0438 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0441\u0440\u0435\u0434\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0436\u0435\u0440\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Verizon, AT&T, Lumen Technologies \u0438\u00a0T-Mobile.\n\n\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c, \u043a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 Washington Post, Salt Typhoon \u0442\u0430\u043a\u0436\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c\u00a0\u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0435\u00a0\u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 150 \u0434\u043e\u043b\u0436\u043d\u043e\u0441\u0442\u043d\u044b\u0445 \u043b\u0438\u0446 \u0438\u0437 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0421\u0428\u0410 \u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u043d\u0438\u0435\u043c \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u043e\u0432.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Trend Micro, Salt Typhoon \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b \u0442\u0435\u043b\u0435\u043a\u043e\u043c, \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u043a\u043e\u043d\u0441\u0430\u043b\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u0435, \u0445\u0438\u043c\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u0421\u0428\u0410, \u0410\u0437\u0438\u0430\u0442\u0441\u043a\u043e-\u0422\u0438\u0445\u043e\u043e\u043a\u0435\u0430\u043d\u0441\u043a\u043e\u043c \u0440\u0435\u0433\u0438\u043e\u043d\u0435, \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435, \u0432 \u042e\u0436\u043d\u043e\u0439 \u0410\u0444\u0440\u0438\u043a\u0435 \u0438 \u0434\u0440.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0434\u0432\u0430\u0434\u0446\u0430\u0442\u0438 \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u043a\u043e\u0433\u0434\u0430 Salt Typhoon \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f, \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445, \u0438\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0443\u0434\u0435\u043b\u0435\u043d\u043e \u0434\u0432\u0443\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u043c: \n- \u0410\u043b\u044c\u0444\u0430, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439 \u0445\u0438\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c Demodex \u0438 SnappyBee,\n- \u0411\u0435\u0442\u0430 - \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0439 \u0448\u043f\u0438\u043e\u043d\u0430\u0436 \u043f\u0440\u043e\u0442\u0438\u0432 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0438 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c GhostSpider \u0438 Demodex.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u0442\u0441\u044f \u043f\u0443\u0442\u0435\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c: CVE-2023-46805, CVE-2024-21887\u00a0(VPN-\u0441\u0435\u0440\u0432\u0438\u0441 Ivanti Connect), CVE-2023-48788 (FortiClient EMS), CVE-2022-3236 (\u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440 Sophos), CVE-2021-26855, CVE-2021-26857 - 26858, CVE-2021-27065 (ProxyLogon).\n\nSalt Typhoon \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b LOLbin \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438 \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u043f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, GhostSpider - \u044d\u0442\u043e \u043c\u043e\u0434\u0443\u043b\u044c\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0441\u0442\u0438, \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u0437\u0430 \u0441\u0447\u0435\u0442 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u041e\u043d \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 DLL \u0438 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u043b\u0443\u0436\u0431\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 regsvr32.exe, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c, \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u043c\u0430\u044f\u043a\u043e\u0432, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043f\u0430\u043c\u044f\u0442\u044c.\n\nGhostSpider \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u043e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f (C2), \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u0445 HTTP \u0438\u043b\u0438 \u0444\u0430\u0439\u043b\u0430\u0445 cookie, \u0447\u0442\u043e\u0431\u044b \u0441\u043c\u0435\u0448\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0441 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c. \u0421\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0431\u044d\u043a\u0434\u043e\u0440\u0443 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0443.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u0430\u0440\u0441\u0435\u043d\u0430\u043b Salt Typhoon \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0431\u0448\u0438\u0440\u0435\u043d \u0438 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u0443\u0435\u0442 \u0435\u0435 \u043a\u0430\u043a \u043e\u0434\u043d\u0443 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0430\u0433\u0440\u0435\u0441\u0441\u0438\u0432\u043d\u044b\u0445 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 APT.", "url": "https://t.me/true_secator/6473"}, {"timestamp": "2024-11-27T00:00:00Z", "date_only": false, "value": "2024-11-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9faf5957-86da-4446-a6f4-98d96b36513d"}, {"timestamp": "2024-11-27T08:28:21Z", "date_only": false, "value": "2024-11-27T08:28:21.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ffea72a3-7935-4078-b769-b872475c5eae", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "29d91209-dfcd-47ef-9968-95ecac9c0b05"}, {"timestamp": "2024-11-28T00:00:00Z", "date_only": false, "value": "2024-11-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ab86b473-a8e9-46b0-a5f8-8712ef90356a"}, {"timestamp": "2024-11-30T00:00:00Z", "date_only": false, "value": "2024-11-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f0abae86-c2c3-46e6-95ee-325bd93863fe"}, {"timestamp": "2024-12-01T00:00:00Z", "date_only": false, "value": "2024-12-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1e45b5cf-3eb6-44d3-9fd4-5dd04b4b80ed"}, {"timestamp": "2024-12-02T00:00:00Z", "date_only": false, "value": "2024-12-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9c51bd4b-7ea4-4460-8e02-2b56e79fa40c"}, {"timestamp": "2024-12-03T00:00:00Z", "date_only": false, "value": "2024-12-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "99d64703-5a99-452a-a43f-43e33b97aa8c"}, {"timestamp": "2024-12-05T00:00:00Z", "date_only": false, "value": "2024-12-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ccb51eb4-fa96-4a63-8c32-b58076024e90"}, {"timestamp": "2024-12-06T00:00:00Z", "date_only": false, "value": "2024-12-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "325e5714-7332-4a31-b609-b33dc2eae9b8"}, {"timestamp": "2024-12-06T06:02:25.058Z", "date_only": false, "value": "2024-12-06T06:02:25.058002Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/c54ba016-1255-4e07-9fb6-686f9a0a936b", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9e3b474e-0c97-48f4-8abf-d5ffd1254034", "url": "https://vulnerability.circl.lu/bundle/c54ba016-1255-4e07-9fb6-686f9a0a936b"}, {"timestamp": "2024-12-07T00:00:00Z", "date_only": false, "value": "2024-12-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "398c7f2f-d424-493a-b0fd-eeb0065e06b2"}, {"timestamp": "2024-12-09T00:00:00Z", "date_only": false, "value": "2024-12-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8ea2571f-cdc8-42d5-80c0-7220d721a532"}, {"timestamp": "2024-12-10T00:00:00Z", "date_only": false, "value": "2024-12-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a83f0bdb-de7d-4a43-948e-542854ea4952"}, {"timestamp": "2024-12-12T00:00:00Z", "date_only": false, "value": "2024-12-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "082e7118-7f70-4641-9865-ca7ae23be3a8"}, {"timestamp": "2024-12-14T00:00:00Z", "date_only": false, "value": "2024-12-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "54aa79f8-b373-4856-a6c9-a42f4a5b219d"}, {"timestamp": "2024-12-15T00:00:00Z", "date_only": false, "value": "2024-12-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8f07bd5c-4f2b-45d8-a644-87084be9d589"}, {"timestamp": "2024-12-17T00:00:00Z", "date_only": false, "value": "2024-12-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ee7c0259-1c69-44e2-bff4-2739ba7ee02d"}, {"timestamp": "2024-12-18T00:00:00Z", "date_only": false, "value": "2024-12-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "be800163-a0f7-4631-9ced-9211f1f9ea87"}, {"timestamp": "2024-12-20T00:00:00Z", "date_only": false, "value": "2024-12-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "96ace01c-00fb-4627-a051-5807a53c6bd4"}, {"timestamp": "2024-12-22T00:00:00Z", "date_only": false, "value": "2024-12-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "161bbfb0-3821-491d-8a9e-3c6d46afd336"}, {"timestamp": "2024-12-23T00:00:00Z", "date_only": false, "value": "2024-12-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "148cdf35-11e0-44cb-badd-2239df3aa2aa"}, {"timestamp": "2024-12-24T00:00:00Z", "date_only": false, "value": "2024-12-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7215750b-cebb-405e-8721-ad437db20394"}, {"timestamp": "2024-12-24T20:22:41.191Z", "date_only": false, "value": "2024-12-24T20:22:41.191983Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970986", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "319f17cf-a47e-402d-9105-6a63fcb013a4", "url": "https://feedsin.space/feed/CISAKevBot/items/2970986"}, {"timestamp": "2024-12-25T00:00:00Z", "date_only": false, "value": "2024-12-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e0b48aa9-0992-4481-9623-4baf68aa3a81"}, {"timestamp": "2024-12-26T00:00:00Z", "date_only": false, "value": "2024-12-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8bed114a-c566-4516-90ee-404f8a42679b"}, {"timestamp": "2024-12-29T00:00:00Z", "date_only": false, "value": "2024-12-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "69a2c9e9-d90b-4507-8d58-35fa14ce0d97"}, {"timestamp": "2024-12-30T00:00:00Z", "date_only": false, "value": "2024-12-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a78e0c1a-3882-4de4-b4b5-23e4ca7cdf07"}, {"timestamp": "2024-12-31T00:00:00Z", "date_only": false, "value": "2024-12-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-31)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "837051a1-d6b9-446c-9bea-3e9aed4ccd1b"}, {"timestamp": "2025-01-01T00:00:00Z", "date_only": false, "value": "2025-01-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c252787a-9348-440b-a3fc-80c2195656e0"}, {"timestamp": "2025-01-01T21:32:40.378Z", "date_only": false, "value": "2025-01-01T21:32:40.378981Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vixous.bsky.social/post/3lepj6gzcre2h", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "231088ab-2264-468c-93cf-16221e0bf773", "url": "https://bsky.app/profile/vixous.bsky.social/post/3lepj6gzcre2h"}, {"timestamp": "2025-01-02T00:00:00Z", "date_only": false, "value": "2025-01-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "54ad298e-63a6-4798-86be-b8cd4ac9c9f2"}, {"timestamp": "2025-01-03T00:00:00Z", "date_only": false, "value": "2025-01-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f944350e-0967-4474-884c-4ffbbab85762"}, {"timestamp": "2025-01-04T00:00:00Z", "date_only": false, "value": "2025-01-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "93f142ff-6eea-433f-89e9-12fdf0bb7580"}, {"timestamp": "2025-01-05T00:00:00Z", "date_only": false, "value": "2025-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "22d6ec38-c60f-4211-b4a7-36248352f963"}, {"timestamp": "2025-01-05T00:00:00Z", "date_only": false, "value": "2025-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d4f31dab-1dfb-4096-a15f-b3853d5ccd87"}, {"timestamp": "2025-01-06T00:00:00Z", "date_only": false, "value": "2025-01-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "476decc6-c442-48cb-a977-8fd0619976ba"}, {"timestamp": "2025-01-06T08:18:36.405Z", "date_only": false, "value": "2025-01-06T08:18:36.405994Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-afc76651-7dc1042c2df819ed", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6e7f5f56-494b-45ba-a022-26e8b68fa099", "url": "https://poliverso.org/objects/0477a01e-afc76651-7dc1042c2df819ed"}, {"timestamp": "2025-01-06T15:03:15.697Z", "date_only": false, "value": "2025-01-06T15:03:15.697889Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lf3fqsgaeg27", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9050d930-2167-44c8-9849-8057caef95c3", "url": "https://bsky.app/profile/hackingne.ws/post/3lf3fqsgaeg27"}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8d375f47-8d32-4e6a-af33-ce7faff1d03f"}, {"timestamp": "2025-01-08T00:00:00Z", "date_only": false, "value": "2025-01-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "37e61bec-5a6a-4bfd-935f-d9470e310323"}, {"timestamp": "2025-01-10T00:00:00Z", "date_only": false, "value": "2025-01-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "07177d36-29c1-48a3-b712-dd3c988972bd"}, {"timestamp": "2025-01-10T17:48:53Z", "date_only": false, "value": "2025-01-10T17:48:53.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6609", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "754dea9b-9bc0-4a74-bbc2-116cc89a1838", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438\u00a0EagerBee\u00a0- \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u043e\u0439 APT-\u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0443, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0411\u043b\u0438\u0436\u043d\u0435\u0433\u043e \u0412\u043e\u0441\u0442\u043e\u043a\u0430.\n\n\u041d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 EAGERBEE (\u043e\u043d \u0436\u0435\u00a0Thumtais) \u043e\u0441\u043d\u0430\u0449\u0435\u043d \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0431\u044d\u043a\u0434\u043e\u0440\u0443 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438, \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0435 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044f \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u044e \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0437\u0434\u0435\u043b\u0438\u0442\u044c \u043f\u043e \u0438\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b: Plugin Orchestrator, File System Manipulation, Remote Access Manager, Process Exploration, Network Connection Listing \u0438 Service Management.\n\nEAGERBEE \u0431\u044b\u043b\u00a0\u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u00a0Elastic Security Labs, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0430 \u0435\u0433\u043e \u043a \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043d\u0430 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0430\u0436 APT, \u043e\u0442\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a REF5961.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f SSL \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0412\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0431\u044b\u043b\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 Cluster Alpha \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0431\u043e\u043b\u0435\u0435 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e\u0434  \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c\u00a0Crimson Palace, \u0446\u0435\u043b\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b\u0430 \u043a\u0440\u0430\u0436\u0430 \u0432\u0430\u0436\u043d\u044b\u0445 \u0432\u043e\u0435\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u0432 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c \u0441\u0435\u043a\u0442\u043e\u0440\u0435 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438.\n\n\u041a\u043b\u0430\u0441\u0442\u0435\u0440 Alpha, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sophos, \u043f\u0435\u0440\u0435\u0441\u0435\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 \u0443\u0433\u0440\u043e\u0437, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u043c\u0438 \u043a\u0430\u043a BackdoorDiplomacy, REF5961, Worok \u0438 TA428.\n\nBackdoorDiplomacy, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0441\u0445\u043e\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e TTPs \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u044f\u0437\u044b\u0447\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 CloudComputating\u00a0(Faking Dragon), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430  \u0442\u0435\u043b\u0435\u043a\u043e\u043c \u0432 \u042e\u0436\u043d\u043e\u0439 \u0410\u0437\u0438\u0438 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u043e\u043c QSC.\n\n\u041a\u0430\u043a \u0440\u0430\u043d\u0435\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u043b\u0438 \u0432 \u041b\u041a, QSC \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043c\u043e\u0434\u0443\u043b\u044c\u043d\u0443\u044e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430 \u0434\u0438\u0441\u043a\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a, \u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438 \u0432\u0441\u0435\u0433\u0434\u0430 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043f\u0430\u043c\u044f\u0442\u0438.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0434\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u043a\u0430\u043a\u043e\u0439 \u043f\u043b\u0430\u0433\u0438\u043d (\u043c\u043e\u0434\u0443\u043b\u044c) \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u043f\u043e \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044e \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0435\u0439 \u0446\u0435\u043b\u0438.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c EAGERBEE \u0438\u043d\u0436\u0435\u043a\u0442\u043e\u0440\u043d\u0430\u044f DLL \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043c\u043e\u0434\u0443\u043b\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0435\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u043a\u0435\u0442 TCP.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0442\u043e\u0447\u043d\u0430\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 \u0432\u0445\u043e\u0434\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0432 \u044d\u0442\u0438\u0445 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f\u0445, \u043d\u0430 \u0434\u0430\u043d\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439.\n\n\u0417\u0430\u0442\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Plugin Orchestrator, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u043f\u043e\u043c\u0438\u043c\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, NetBIOS-\u0438\u043c\u0435\u043d\u0438 \u0434\u043e\u043c\u0435\u043d\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a), \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445 \u0438 \u043e\u0436\u0438\u0434\u0430\u0435\u0442 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0439 \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u043f\u043b\u0430\u0433\u0438\u043d\u0430\u043c\u0438.\n\n\u041e\u043d\u0438 \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0442 \u0437\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0442 Orchestrator, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c\u0438, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u041a \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 EAGERBEE \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u0432 \u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438, \u043f\u0440\u0438\u0447\u0435\u043c \u0434\u0432\u0435 \u0438\u0437 \u043d\u0438\u0445 \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c ProxyLogon (CVE-2021-26855) \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0447\u0442\u043e \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044e \u0431\u044d\u043a\u0434\u043e\u0440\u0430.\n\n\u0420\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u043d\u0430\u044f \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430 EAGERBEE \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0435\u043c\u0443 \u0441\u043a\u0440\u044b\u0442\u043d\u043e\u0441\u0442\u044c, \u043f\u043e\u043c\u043e\u0433\u0430\u044f \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u043c\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u043c\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a.\n\n\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0441 \u043e\u0431\u044b\u0447\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u0442\u0430\u043a\u0436\u0435 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u0435\u0433\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0430\u043d\u0430\u043b\u0438\u0437.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0438 \u041c\u041e\u041a - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "url": "https://t.me/true_secator/6609"}, {"timestamp": "2025-01-11T00:00:00Z", "date_only": false, "value": "2025-01-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c29214f8-5bb0-4308-9dc0-0fdb81039120"}, {"timestamp": "2025-01-12T00:00:00Z", "date_only": false, "value": "2025-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3947830c-a7ad-43f8-8364-e21c7a5a7519"}, {"timestamp": "2025-01-13T00:00:00Z", "date_only": false, "value": "2025-01-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1f986f44-b8e0-4742-920e-ef80c7aec1b5"}, {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4238b847-f50c-40e2-bd62-09b969b4b356"}, {"timestamp": "2025-01-16T00:00:00Z", "date_only": false, "value": "2025-01-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9cceda94-62fd-4f10-8269-14def21f88cd"}, {"timestamp": "2025-01-17T00:00:00Z", "date_only": false, "value": "2025-01-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "01f9e98e-036c-46a7-9d52-1ac69c0d062b"}, {"timestamp": "2025-01-18T00:00:00Z", "date_only": false, "value": "2025-01-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ef01444a-07fd-47c7-bc04-c9e7769e6c12"}, {"timestamp": "2025-01-19T00:00:00Z", "date_only": false, "value": "2025-01-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "70ae5c2b-0027-4613-a34f-56938603d019"}, {"timestamp": "2025-01-20T00:00:00Z", "date_only": false, "value": "2025-01-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e88a4e98-5148-47c5-b6f2-abec1963444e"}, {"timestamp": "2025-01-21T00:00:00Z", "date_only": false, "value": "2025-01-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e24691d1-b797-4931-9d5b-d75a97ade49b"}, {"timestamp": "2025-01-22T00:00:00Z", "date_only": false, "value": "2025-01-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c61ba6f5-e1ac-4861-adc1-e055bfd3b6c2"}, {"timestamp": "2025-01-23T00:00:00Z", "date_only": false, "value": "2025-01-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8c5dcc6c-5a90-4047-8ab1-eb653259fbd3"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3fac80fe-aea7-4ce9-a8a6-b494104d020b"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4322c8cc-9211-4e38-a513-0360074fd0cd"}, {"timestamp": "2025-01-27T00:00:00Z", "date_only": false, "value": "2025-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1c436435-e0cb-47c7-9f71-8e06691ec4de"}, {"timestamp": "2025-01-27T00:00:00Z", "date_only": false, "value": "2025-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6586193a-85ca-477f-8778-42644ee50c08"}, {"timestamp": "2025-01-27T16:03:21.398Z", "date_only": false, "value": "2025-01-27T16:03:21.398793Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lgqcvl5iam2k", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e289a36f-e4fa-4034-9656-075448bfce31", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lgqcvl5iam2k"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4f56f00d-8f82-4d12-bdda-29cb8b013e69"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9a9207be-5ffc-473a-a2c1-503b55f1738e"}, {"timestamp": "2025-01-30T00:00:00Z", "date_only": false, "value": "2025-01-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1a21294c-6169-408f-9426-ec2783f8c16e"}, {"timestamp": "2025-01-31T00:00:00Z", "date_only": false, "value": "2025-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-31)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a85aa4f2-cbea-46dc-bec6-c522bfe3746f"}, {"timestamp": "2025-01-31T00:00:00Z", "date_only": false, "value": "2025-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-31)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0ee6434b-e142-4c22-8857-309a9a87df6b"}, {"timestamp": "2025-02-01T00:00:00Z", "date_only": false, "value": "2025-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "69b6fc2e-c061-4609-a476-f2801e23620b"}, {"timestamp": "2025-02-01T00:00:00Z", "date_only": false, "value": "2025-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "eca79054-e581-4fe1-ae26-6cd4c798739f"}, {"timestamp": "2025-02-02T00:00:00Z", "date_only": false, "value": "2025-02-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9e27a131-64fd-4314-bebd-7285e8e13a72"}, {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b408e9c1-4358-44e3-bb15-c2671ce265c8"}, {"timestamp": "2025-02-03T00:00:00Z", "date_only": false, "value": "2025-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a87fde5a-dc57-4746-ae60-e8e83303db42"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a519b8a8-3381-4dd7-8d0e-9108f101226e"}, {"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "52a9882d-36dc-4d1e-b7fb-4f4f293766a7"}, {"timestamp": "2025-02-08T00:00:00Z", "date_only": false, "value": "2025-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "bdc7ee8f-f21f-4a70-a43b-ec42315ae8b5"}, {"timestamp": "2025-02-08T00:00:00Z", "date_only": false, "value": "2025-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d608d800-5c92-4815-bda5-d8145ce7193d"}, {"timestamp": "2025-02-10T00:00:00Z", "date_only": false, "value": "2025-02-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9bf6aac4-7837-4c78-b8a8-df86d883a600"}, {"timestamp": "2025-02-10T00:00:00Z", "date_only": false, "value": "2025-02-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "92f91edf-cbc5-4d5b-a11e-99a62e57df35"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": false, "value": "2025-02-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "71b9dfd9-4ec5-48df-9ce5-c14d0e494f02"}, {"timestamp": "2025-02-12T00:00:00Z", "date_only": false, "value": "2025-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a309a966-3b44-432d-924b-03f13cf9fa47"}, {"timestamp": "2025-02-12T00:00:00Z", "date_only": false, "value": "2025-02-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2338eda5-5a1f-4b43-bf5b-0af6de57078c"}, {"timestamp": "2025-02-13T00:00:00Z", "date_only": false, "value": "2025-02-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "30738c97-97c9-472c-a56a-77c69802d1cb"}, {"timestamp": "2025-02-14T00:00:00Z", "date_only": false, "value": "2025-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "305ccd6d-b0c1-4774-ade0-bd1ed701f9c1"}, {"timestamp": "2025-02-14T00:00:00Z", "date_only": false, "value": "2025-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0b98184d-dc2b-4ae2-adca-caf5c6cf5587"}, {"timestamp": "2025-02-15T00:00:00Z", "date_only": false, "value": "2025-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b7f78935-131b-42fe-a935-13d71eb209f8"}, {"timestamp": "2025-02-15T00:00:00Z", "date_only": false, "value": "2025-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a9c6e550-b689-4b7b-92b3-3c1425ac50d1"}, {"timestamp": "2025-02-16T00:00:00Z", "date_only": false, "value": "2025-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8f926691-2916-4009-a757-3e44f05090bc"}, {"timestamp": "2025-02-16T00:00:00Z", "date_only": false, "value": "2025-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "97046540-975e-4183-b48b-69107af63a87"}, {"timestamp": "2025-02-17T00:00:00Z", "date_only": false, "value": "2025-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "26a8f924-4721-41c5-a6a1-66f061d339bc"}, {"timestamp": "2025-02-17T00:00:00Z", "date_only": false, "value": "2025-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7960c3a6-5db7-417e-9ca5-a4d389641236"}, {"timestamp": "2025-02-18T00:00:00Z", "date_only": false, "value": "2025-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d094c5a3-d488-4c65-be04-bb96cd2386f4"}, {"timestamp": "2025-02-18T00:00:00Z", "date_only": false, "value": "2025-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "fdbe4b8d-a5fd-4921-8418-348646e009be"}, {"timestamp": "2025-02-19T00:00:00Z", "date_only": false, "value": "2025-02-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "dd6af319-2cc1-4339-ace7-c07535f0d020"}, {"timestamp": "2025-02-19T00:00:00Z", "date_only": false, "value": "2025-02-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9ed90aea-87e7-4500-8f7a-44cf8253c5bd"}, {"timestamp": "2025-02-20T00:00:00Z", "date_only": false, "value": "2025-02-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "55c8eec6-57e0-4239-a010-df41895d693f"}, {"timestamp": "2025-02-21T00:00:00Z", "date_only": false, "value": "2025-02-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2b1f60e7-9456-4240-90ea-8a5d4896765a"}, {"timestamp": "2025-02-22T00:00:00Z", "date_only": false, "value": "2025-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "59e24f29-70d0-46dc-b443-2de68152d0a5"}, {"timestamp": "2025-02-22T00:00:00Z", "date_only": false, "value": "2025-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "182b93e8-60dd-4a19-935a-dfb422e6be54"}, {"timestamp": "2025-02-23T00:00:00Z", "date_only": false, "value": "2025-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "82712c73-eefb-41af-bb6d-e9892e5ae04c"}, {"timestamp": "2025-02-23T00:00:00Z", "date_only": false, "value": "2025-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c75b4eb2-5f11-4856-aafb-275b90524f9f"}, {"timestamp": "2025-02-23T02:09:53Z", "date_only": false, "value": "2025-02-23T02:09:53.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "17abef29-f29b-4126-97f2-2009b80936c3"}, {"timestamp": "2025-02-23T04:10:36Z", "date_only": false, "value": "2025-02-23T04:10:36.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "53519ea5-497d-481c-b18a-2df7d387e641"}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "80393961-a03d-4cac-b8ea-69515b055638"}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2bc2e25e-e557-4972-bea3-e62124e98f21"}, {"timestamp": "2025-02-25T00:00:00Z", "date_only": false, "value": "2025-02-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "390e0981-a4fd-47d8-823b-077ecb6158d1"}, {"timestamp": "2025-02-26T00:00:00Z", "date_only": false, "value": "2025-02-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ad025a1c-c9e1-4946-bb9e-68a31493a5ff"}, {"timestamp": "2025-02-28T00:00:00Z", "date_only": false, "value": "2025-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "51aa905b-3f49-425b-af52-82eec60330f3"}, {"timestamp": "2025-02-28T00:00:00Z", "date_only": false, "value": "2025-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "dc6f8e8d-cef6-44e8-9cf2-82267d13f674"}, {"timestamp": "2025-02-28T23:49:13.272Z", "date_only": false, "value": "2025-02-28T23:49:13.272798Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/fdda4963-0aa7-4d15-8a8f-969db8f304ca", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a2e27816-e158-42f7-a634-ef454ec033eb", "url": "https://vulnerability.circl.lu/bundle/fdda4963-0aa7-4d15-8a8f-969db8f304ca"}, {"timestamp": "2025-03-01T00:00:00Z", "date_only": false, "value": "2025-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "21f0d1e4-a768-412a-830a-fbd161d43e85"}, {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b8815f0f-347e-4b83-8476-eddf88f67aeb"}, {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "22958bf5-8bf3-4557-bc3a-d3f9659f17be"}, {"timestamp": "2025-03-03T00:00:00Z", "date_only": false, "value": "2025-03-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9abe61fd-d05e-418f-a786-6629d6020a52"}, {"timestamp": "2025-03-03T06:58:04.818Z", "date_only": false, "value": "2025-03-03T06:58:04.818791Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-424ebad0-6bee0cbd5f75d218", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "dfa5c86b-b89b-4c1f-8872-02854c1766a8", "url": "https://poliverso.org/objects/0477a01e-424ebad0-6bee0cbd5f75d218"}, {"timestamp": "2025-03-04T00:00:00Z", "date_only": false, "value": "2025-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "81d1aa6d-3016-4eb7-a3c6-1809730e0b34"}, {"timestamp": "2025-03-05T00:00:00Z", "date_only": false, "value": "2025-03-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d201c305-0025-40bb-b87b-ba63bf69e737"}, {"timestamp": "2025-03-07T00:00:00Z", "date_only": false, "value": "2025-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "20cb008b-df61-47fa-a58f-4a6517cc84ae"}, {"timestamp": "2025-03-07T00:00:00Z", "date_only": false, "value": "2025-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4ebb6bad-4539-468a-b957-7fce69ab04c2"}, {"timestamp": "2025-03-08T00:00:00Z", "date_only": false, "value": "2025-03-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "09fd19af-7f05-4bee-9017-9ffad540158c"}, {"timestamp": "2025-03-08T00:00:00Z", "date_only": false, "value": "2025-03-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7c8f0788-7ae7-4d15-ae0a-80f94b94767d"}, {"timestamp": "2025-03-09T00:00:00Z", "date_only": false, "value": "2025-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d60d0ad6-b7e7-475a-b024-c5d7a53aa39e"}, {"timestamp": "2025-03-09T00:00:00Z", "date_only": false, "value": "2025-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "32578469-7454-46d8-a98e-92fb92480c3c"}, {"timestamp": "2025-03-10T00:00:00Z", "date_only": false, "value": "2025-03-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4e78a910-e18d-4555-a925-fcc6c490edc5"}, {"timestamp": "2025-03-12T00:00:00Z", "date_only": false, "value": "2025-03-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f42e8b39-4cf0-483a-8e2c-bbb11c3d7b72"}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "be0240a5-7a3d-423b-8ed5-10d09bd6e878"}, {"timestamp": "2025-03-13T10:03:09Z", "date_only": false, "value": "2025-03-13T10:03:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/03/13/head-mare-and-twelve-joint.html", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f3e5a336-1d8a-46d2-aea1-82d057b7ac38", "url": "https://threatintel.cc/2025/03/13/head-mare-and-twelve-joint.html"}, {"timestamp": "2025-03-13T10:33:16.068Z", "date_only": false, "value": "2025-03-13T10:33:16.068446Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-55c203cf-b3d97562bd61ddcd", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ed6481c9-f1c8-4f64-bb74-13aac06d38be", "url": "https://poliverso.org/objects/0477a01e-55c203cf-b3d97562bd61ddcd"}, {"timestamp": "2025-03-14T00:00:00Z", "date_only": false, "value": "2025-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "fe1d4206-addf-4966-bcc9-90673f9b71f9"}, {"timestamp": "2025-03-14T00:00:00Z", "date_only": false, "value": "2025-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "74b77e84-24a0-46da-b9c3-f546f446ca3c"}, {"timestamp": "2025-03-15T00:00:00Z", "date_only": false, "value": "2025-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e78488a7-bfca-47aa-a03d-ff442cc487a0"}, {"timestamp": "2025-03-15T00:00:00Z", "date_only": false, "value": "2025-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "57f4b811-06b7-49b4-a283-9a5022c8af1e"}, {"timestamp": "2025-03-16T00:00:00Z", "date_only": false, "value": "2025-03-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "fded53a0-0b8f-4eee-94aa-99c6b909c673"}, {"timestamp": "2025-03-17T00:00:00Z", "date_only": false, "value": "2025-03-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ecbfa922-ef59-404f-be7f-1d4ba9844265"}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "00af61a7-059d-4543-95f1-f6d5fd673654"}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b7ff7e29-99b9-4752-9bd4-dd0b612d3d22"}, {"timestamp": "2025-03-19T00:00:00Z", "date_only": false, "value": "2025-03-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3c083854-68f6-4989-88b2-5fd8f52d4619"}, {"timestamp": "2025-03-19T00:00:00Z", "date_only": false, "value": "2025-03-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "79ec17b3-4420-470d-88a7-619e49e926ec"}, {"timestamp": "2025-03-20T00:00:00Z", "date_only": false, "value": "2025-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "dad053c6-389f-4d13-9bcc-01d9e97a9108"}, {"timestamp": "2025-03-20T00:00:00Z", "date_only": false, "value": "2025-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "237276bd-8d38-49df-b299-5363b51a03c0"}, {"timestamp": "2025-03-21T00:00:00Z", "date_only": false, "value": "2025-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4843e026-8163-4d1b-9edb-05a0f817208c"}, {"timestamp": "2025-03-21T00:00:00Z", "date_only": false, "value": "2025-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a577113c-8d8f-4c05-b593-570915d3807f"}, {"timestamp": "2025-03-21T12:51:15Z", "date_only": false, "value": "2025-03-21T12:51:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5571", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "74d713cc-726e-4f6a-a14a-cd86bb8c3cb0", "content": "\u200b\u26a1\ufe0fHead Mare \u0438 Twelve \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u043b\u0438\u0441\u044c: \u0432\u044b\u0432\u043e\u0434 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\n\n\ud83d\udcac \u0414\u0432\u0435 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Head Mare \u0438 Twelve \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u0447\u0430\u043b\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0432\u043c\u0435\u0441\u0442\u0435 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \u041e\u0431 \u044d\u0442\u043e\u043c \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0451\u0442\u0435 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e, \u0433\u0434\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442\u0441\u044f \u0441\u043e\u0432\u043f\u0430\u0434\u0435\u043d\u0438\u044f \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0440\u0430\u043d\u0435\u0435 \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0441 Twelve.\n\n\u0412 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 Head Mare \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WinRAR ( CVE-2023-38831 ) \u0434\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0417\u0430\u0442\u0435\u043c \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 LockBit \u0434\u043b\u044f Windows \u0438 Babuk \u0434\u043b\u044f Linux (ESXi). Twelve, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0430 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0430\u0439\u043f\u0435\u0440\u043e\u0432.\n\n\u0412 \u043d\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 Head Mare \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442 CobInt \u2014 \u0431\u044d\u043a\u0434\u043e\u0440, \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0439\u0441\u044f \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 ExCobalt \u0438 Crypt Ghouls. \u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u0438\u043c\u043f\u043b\u0430\u043d\u0442 PhantomJitter, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b. CobInt \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0441\u044f \u0433\u0440\u0443\u043f\u043f\u043e\u0439 Twelve, \u0447\u0442\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u044c \u043c\u0435\u0436\u0434\u0443 \u043d\u0438\u043c\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438.\n\n\u0414\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 Head Mare \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0444\u0438\u0448\u0438\u043d\u0433, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ProxyLogon (CVE-2021-26855) \u0432 Microsoft Exchange Server, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u043e\u043c \u0441\u0435\u0442\u0435\u0439 \u043f\u043e\u0434\u0440\u044f\u0434\u0447\u0438\u043a\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u0447\u0435\u0440\u0435\u0437 \u043d\u0438\u0445 \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u043a \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0446\u0435\u043b\u044f\u043c \u2014 \u044d\u0442\u043e \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u043e\u0439 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u0441\u0432\u044f\u0437\u0438.\n\n\u0427\u0435\u0440\u0435\u0437 ProxyLogon Head Mare \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0435\u0442 CobInt \u0438 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432\u043c\u0435\u0441\u0442\u043e \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0430 \u0437\u0430\u0434\u0430\u0447. \u0427\u0435\u0440\u0435\u0437 \u044d\u0442\u0438 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u044e\u0442\u0441\u044f \u043f\u043e RDP \u0438 \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b. \u0414\u043b\u044f \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0438\u043c\u0435\u043d\u0430 \u0432\u0440\u043e\u0434\u0435 \u00abcalc.exe\u00bb, \u0443\u0434\u0430\u043b\u044f\u044e\u0442\u0441\u044f \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u0430 \u0442\u0440\u0430\u0444\u0438\u043a \u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Gost \u0438 Cloudflared.\n\n\u0412 \u0430\u0442\u0430\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0440\u0430\u0437\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b:\n\nquser.exe, tasklist.exe \u0438 netstat.exe \u2014 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0435;\nfscan \u0438 SoftPerfect Network Scanner \u2014 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0432 \u0441\u0435\u0442\u0438;\nADRecon \u2014 \u0434\u043b\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 Active Directory;\nMimikatz, secretsdump, ProcDump \u2014 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439;\nmRemoteNG, smbexec, wmiexec, PAExec, PsExec \u2014 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f;\nRclone \u2014 \u0434\u043b\u044f \u0432\u044b\u0432\u043e\u0434\u0430 \u0434\u0430\u043d\u043d\u044b\u0445;\nLockBit 3.0 \u0438 Babuk \u2014 \u0434\u043b\u044f \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0437\u0430\u043f\u0438\u0441\u043a\u0443 \u0441 \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u0430\u043c\u0438 \u0432 Telegram \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5571"}, {"timestamp": "2025-03-21T15:27:55Z", "date_only": false, "value": "2025-03-21T15:27:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/25229", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "18f33cce-5736-4ee7-b6f5-0e7b652475fe", "content": "\ud83d\udea8 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d\u0430\u043c \u043d\u0430 \u0437\u0430\u043c\u0435\u0442\u043a\u0443:  Head Mare & Twelve - \u0422\u0435\u0445\u043d\u0438\u043a\u0430 \u041f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0438 \u0417\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u0421\u0435\u0442\u044f\u0445\n\nKaspersky \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043a\u043e\u043b\u043b\u0430\u0431\u043e\u0440\u0430\u0446\u0438\u0438 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043e\u043a Head Mare \u0438 Twelve, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.  Head Mare \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0438 C2-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0440\u0430\u043d\u0435\u0435 \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u043e \u0430\u0441\u0441\u043e\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441 Twelve, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u044b\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u0422\u0435\u0445\u043d\u0438\u043a\u0430 \u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u041f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f:\n\n\ud83d\udfe2CVE-2023-38831 (WinRAR):  \u0424\u0438\u0448\u0438\u043d\u0433 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0430\u0440\u0445\u0438\u0432\u0430\u043c\u0438.  \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0430\u0440\u0445\u0438\u0432\u0430, \u043c\u0438\u043d\u0443\u044f \u0437\u0430\u0449\u0438\u0442\u0443 SmartScreen.\n\ud83d\udfe2CVE-2021-26855 (ProxyLogon - Exchange):  \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0434\u0430\u0436\u0435 \u043d\u0435 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 Exchange \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 (Server 2016/2012R2).  \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u0430 CobInt. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 backend Exchange.\n\ud83d\udfe2\u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u041f\u043e\u0434\u0440\u044f\u0434\u0447\u0438\u043a\u043e\u0432 (Supply Chain):  \u0410\u0442\u0430\u043a\u0430 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u044f,  \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u0434\u0440\u044f\u0434\u0447\u0438\u043a\u043e\u0432 \u043a \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u043c \u0431\u0438\u0437\u043d\u0435\u0441-\u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 RDP. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0438 \u043a\u0430\u043d\u0430\u043b\u043e\u0432 \u0441\u0432\u044f\u0437\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044e\u044e \u0441\u0435\u0442\u044c.\n\n\u0422\u0435\u0445\u043d\u0438\u043a\u0430 \u0417\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f (Persistence) -  \u041d\u043e\u0432\u044b\u0439 \u041f\u043e\u0434\u0445\u043e\u0434:\n\n\ud83d\udfe2\u041f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0423\u0447\u0435\u0442\u043a\u0438 \u043d\u0430 \u0421\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0411\u0438\u0437\u043d\u0435\u0441-\u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438: \u0412\u043c\u0435\u0441\u0442\u043e Scheduled Tasks.  \u0421\u043e\u0437\u0434\u0430\u044e\u0442\u0441\u044f \u043d\u043e\u0432\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041e\u0431\u0445\u043e\u0434 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 persistence \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u043d\u0438\u0439.  \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0434\u043b\u044f:\n   *  RDP-\u0434\u043e\u0441\u0442\u0443\u043f\u0430:  \u0418\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u0440\u0443\u0447\u043d\u043e\u0439 \u0437\u0430\u043f\u0443\u0441\u043a \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432.\n   *  \u041c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0417\u0430\u043c\u0435\u0442\u043d\u043e\u0441\u0442\u0438:  \u0414\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0439 (\u0445\u043e\u0442\u044c \u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438) \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438,  \u0441\u043d\u0438\u0436\u0430\u044f \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0447\u0435\u0441\u043a\u043e\u0439 \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438.\n\n\ud83d\udfe2Localtonet + NSSM:  \u0414\u043b\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0445\u043e\u0441\u0442\u0443.\n    *   Localtonet: Reverse proxy, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u0438\u0437\u0432\u043d\u0435 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c.\n    *   NSSM (Non-Sucking Service Manager):  \u0417\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 Localtonet \u043a\u0430\u043a Windows Service,  \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u0443\u0441\u043a \u0438 \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u044c \u043a \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430\u043c.  \u041b\u0435\u0433\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b (\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0410\u043a\u0446\u0435\u043d\u0442):\n\n\ud83d\udfe2CobInt (\u0411\u044d\u043a\u0434\u043e\u0440):  \u0421\u0432\u044f\u0437\u0430\u043d \u0441 Twelve \u0438 Crypt Ghouls.  \u041e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u0448\u0435\u043b\u043b (reverse shell) \u043d\u0430 C2.\n\ud83d\udfe2PhantomJitter (\u0418\u043c\u043f\u043b\u0430\u043d\u0442):  \u041a\u0430\u0441\u0442\u043e\u043c\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430 Head Mare.  \u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e -  \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445.\n\ud83d\udfe2proxy.ps1 (PowerShell \u0421\u043a\u0440\u0438\u043f\u0442):  \u0410\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 Gost \u0438 Cloudflared \u0434\u043b\u044f \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430. PowerShell \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043f\u0440\u043e\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438:\n\n\ud83d\udfe2\u041c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433:  \u0423\u0441\u0438\u043b\u0438\u0442\u044c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 Event Logs \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439,  \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 RDP,  \u0437\u0430\u043f\u0443\u0441\u043a\u0430 nssm.exe,  \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u043a \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c C2.\n\ud83d\udfe2\u0410\u0443\u0434\u0438\u0442 \u0423\u0447\u0435\u0442\u043d\u044b\u0445 \u0417\u0430\u043f\u0438\u0441\u0435\u0439:  \u0420\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0441\u043f\u0438\u0441\u043e\u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043d\u0430 \u0431\u0438\u0437\u043d\u0435\u0441-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445.  \u0412\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438.\n\ud83d\udfe2\u041f\u0430\u0442\u0447\u0438\u043d\u0433 Exchange:  \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u043e \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u0442\u044c Exchange Server,  \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.  CVE-2021-26855 \u2013  \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0431\u0440\u0435\u0448\u044c.\n\ud83d\udfe2\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u041f\u043e\u0434\u0440\u044f\u0434\u0447\u0438\u043a\u043e\u0432:  \u0410\u0443\u0434\u0438\u0442 \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430,  \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0442\u0438,  MFA \u0434\u043b\u044f \u043f\u043e\u0434\u0440\u044f\u0434\u0447\u0438\u043a\u043e\u0432.  \u041c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0438\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\ud83d\udfe2\u0411\u0435\u043b\u044b\u0439 \u0421\u043f\u0438\u0441\u043e\u043a \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439:  \u0420\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 AppLocker \u0438\u043b\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432,  \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432 \u0437\u0430\u043f\u0443\u0441\u043a Localtonet, nssm.exe \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u0443\u0442\u0438\u043b\u0438\u0442.\n\n\u041a\u043e\u0440\u043e\u0447\u0435, \u043f\u044f\u0442\u043d\u0438\u0446\u0430 \u043e\u0442\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f. \u0420\u0430\u0431\u043e\u0442\u0430 \u0441\u0438\u0441\u0430\u0434\u043c\u0438\u043d\u0430 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u0441\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0435\u0435 \u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0435\u0435. \u0422\u0435\u043f\u0435\u0440\u044c \u043d\u0443\u0436\u043d\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0437\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0441\u043b\u0435\u0434\u0438\u0442\u044c, \u043d\u043e \u0438 \u0437\u0430 \u0446\u0435\u043b\u044b\u043c\u0438 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438 \u0441\u0438\u043d\u0434\u0438\u043a\u0430\u0442\u0430\u043c\u0438. \u0413\u043b\u0430\u0432\u043d\u043e\u0435, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0440\u043f\u043b\u0430\u0442\u0443 \u0437\u0430 \"\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0441\u0442\u044c\" \u0442\u043e\u0436\u0435 \u043f\u043e\u0432\u044b\u0441\u0438\u043b\u0438 \ud83d\ude2c\n\n---\nP.S. \u041f\u043e\u0445\u043e\u0436\u0435, \u043f\u043e\u0440\u0430 \u0443\u0436\u0435 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \"\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u043f\u043e\u0434\u0440\u044f\u0434\u0447\u0438\u043a\u0430\" \u043a\u0430\u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0430.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/25229"}, {"timestamp": "2025-03-22T00:00:00Z", "date_only": false, "value": "2025-03-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "57b4442d-c76c-4bb3-bb98-1b238c14511a"}, {"timestamp": "2025-03-23T00:00:00Z", "date_only": false, "value": "2025-03-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "bdd1e878-50ee-4762-80ab-22312221d3ea"}, {"timestamp": "2025-03-24T00:00:00Z", "date_only": false, "value": "2025-03-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "09fc9110-6f65-4cda-b605-c9ba99007d22"}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "024f9dc0-6223-48d1-afa8-fa063dd97777"}, {"timestamp": "2025-03-27T00:00:00Z", "date_only": false, "value": "2025-03-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ecf97da0-fc2a-41d2-8fb5-de132c5a9f22"}, {"timestamp": "2025-03-28T00:00:00Z", "date_only": false, "value": "2025-03-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e260a668-7d4e-4654-a049-f68379b3e3cd"}, {"timestamp": "2025-03-29T00:00:00Z", "date_only": false, "value": "2025-03-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9e93b003-ba01-4670-9fdf-cdf8fac0c84e"}, {"timestamp": "2025-03-30T00:00:00Z", "date_only": false, "value": "2025-03-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f7fe45d3-fec1-40b6-a65d-e60f7633f674"}, {"timestamp": "2025-03-30T00:00:00Z", "date_only": false, "value": "2025-03-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e03e9865-6f8e-4843-af71-04821793364c"}, {"timestamp": "2025-04-01T00:00:00Z", "date_only": false, "value": "2025-04-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "01018f82-ca8e-4a3a-a0f6-ec2deabccbb8"}, {"timestamp": "2025-04-03T00:00:00Z", "date_only": false, "value": "2025-04-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e7fb3465-5695-44cf-8bb0-db16db6854d9"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "96a62ffa-d0fb-4372-a0fd-f93f8b603d51"}, {"timestamp": "2025-04-06T00:00:00Z", "date_only": false, "value": "2025-04-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "15f714db-1215-4f96-bc1d-9627a05b3c88"}, {"timestamp": "2025-04-06T00:00:00Z", "date_only": false, "value": "2025-04-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "801abc9d-6999-45c2-a037-a8d2a402cf29"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": false, "value": "2025-04-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1f6598f5-9f56-4eea-a02b-778bbec35c99"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "408d86d4-35e9-4cbe-b91c-e4a36dafc857"}, {"timestamp": "2025-04-10T00:00:00Z", "date_only": false, "value": "2025-04-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ddab9849-2ded-4813-b655-ef1a12f091dd"}, {"timestamp": "2025-04-12T00:00:00Z", "date_only": false, "value": "2025-04-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3d29a208-a4b2-40c8-9639-ca49b478fff5"}, {"timestamp": "2025-04-12T00:00:00Z", "date_only": false, "value": "2025-04-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2a48d873-6520-433d-89b2-e468b3d0de27"}, {"timestamp": "2025-04-13T00:00:00Z", "date_only": false, "value": "2025-04-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "344e0de4-ca0b-4d40-ba5a-365e291d93f1"}, {"timestamp": "2025-04-14T00:00:00Z", "date_only": false, "value": "2025-04-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "dc26ec7c-e131-4332-b329-6cbd8780d057"}, {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ce32f9f0-7642-4387-aa60-6ad102940f6f"}, {"timestamp": "2025-04-16T00:00:00Z", "date_only": false, "value": "2025-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "15618d05-a897-46e5-add4-b20726b7064b"}, {"timestamp": "2025-04-16T00:00:00Z", "date_only": false, "value": "2025-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e68e8633-4162-4e28-b3b5-b96838a111a7"}, {"timestamp": "2025-04-17T00:00:00Z", "date_only": false, "value": "2025-04-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0d7e10ca-41c4-492b-8f76-6e340d75fb89"}, {"timestamp": "2025-04-18T00:00:00Z", "date_only": false, "value": "2025-04-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e60c234e-f43b-4f73-aa08-f522f1bf4633"}, {"timestamp": "2025-04-20T00:00:00Z", "date_only": false, "value": "2025-04-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ea8a5417-1583-4446-a8e8-d69290d1bfd0"}, {"timestamp": "2025-04-21T00:00:00Z", "date_only": false, "value": "2025-04-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e168c381-833f-4175-8188-2da1d9bc3a39"}, {"timestamp": "2025-04-23T00:00:00Z", "date_only": false, "value": "2025-04-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "109e12f1-52d3-4ffe-829e-2e204150675c"}, {"timestamp": "2025-04-23T00:00:00Z", "date_only": false, "value": "2025-04-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5e8e5794-159d-468b-9e0d-841d388ef0ff"}, {"timestamp": "2025-04-24T00:00:00Z", "date_only": false, "value": "2025-04-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "22dc8c0b-3db6-4cdd-a412-94bd7ec99f05"}, {"timestamp": "2025-04-24T00:00:00Z", "date_only": false, "value": "2025-04-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1aa79edc-ec0e-4826-b18b-1517efd52bca"}, {"timestamp": "2025-04-26T00:00:00Z", "date_only": false, "value": "2025-04-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ee0ff459-1274-46ae-a66d-dae54fffc26a"}, {"timestamp": "2025-04-26T00:00:00Z", "date_only": false, "value": "2025-04-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4ea211c8-739c-4f3e-a03f-7f771a02915a"}, {"timestamp": "2025-04-27T00:00:00Z", "date_only": false, "value": "2025-04-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9ffce380-7e6b-4623-b7fa-5d6447a497c6"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5a54bac8-044a-4058-899e-cbabe3c63639"}, {"timestamp": "2025-04-29T00:00:00Z", "date_only": false, "value": "2025-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a8d42d8c-34a0-41e6-a22e-9760133fd921"}, {"timestamp": "2025-04-30T00:00:00Z", "date_only": false, "value": "2025-04-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f75badb2-9a96-419d-a8b4-421167b51d85"}, {"timestamp": "2025-05-01T00:00:00Z", "date_only": false, "value": "2025-05-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "33bc4400-500b-42ae-8a91-5335cfdf23eb"}, {"timestamp": "2025-05-02T00:00:00Z", "date_only": false, "value": "2025-05-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "37ffec04-4655-4dc3-9514-b6bc88a98140"}, {"timestamp": "2025-05-03T00:00:00Z", "date_only": false, "value": "2025-05-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "32e9d05e-d3c4-43b9-a551-f26031e0e321"}, {"timestamp": "2025-05-04T01:27:12Z", "date_only": false, "value": "2025-05-04T01:27:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/T3am_R70/927", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6e1b67d5-1935-4aa5-9a73-92de0a5efd47", "content": "Kkkkkkkkkkk \n\nA Yemeni hacker, Rami Sanaa, 36, has been formally charged with targeting more than 1,500 US systems, including schools, hospitals, and businesses, using the Black Kingdom ransomware (also known as Pydomer).\n\n\ud83d\udd0e The attack exploited the ProxyLogon vulnerability in Microsoft Exchange servers (CVE-2021-26855), which enables an attacker to execute commands without authentication. It is often used in conjunction with another vulnerability (CVE-2021-27065) to further enhance system access.\n\n#Team_R70 \n#Yemen_army", "url": "https://t.me/T3am_R70/927"}, {"timestamp": "2025-05-04T01:30:07Z", "date_only": false, "value": "2025-05-04T01:30:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/PGaXOuAa1qz-hG4aiVN65VQT3Ow9-M7vC8wCyDvYL63Jxfg", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7b1ab270-9210-4ddc-95a9-8a00896c3385"}, {"timestamp": "2025-05-05T00:00:00Z", "date_only": false, "value": "2025-05-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "08d7957d-050b-4b75-b24b-a10e12cac2e3"}, {"timestamp": "2025-05-06T00:00:00Z", "date_only": false, "value": "2025-05-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "55bf48c6-9cfa-4ad3-9108-f2c15b7a59f8"}, {"timestamp": "2025-05-06T00:00:00Z", "date_only": false, "value": "2025-05-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "cf84c78c-a2c1-4066-a0e9-69de68e01b34"}, {"timestamp": "2025-05-07T00:00:00Z", "date_only": false, "value": "2025-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "42646700-8bc9-4b12-8c99-c322dd76a458"}, {"timestamp": "2025-05-07T00:00:00Z", "date_only": false, "value": "2025-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4d5fbf85-97af-499a-a134-35f3ed2c8faa"}, {"timestamp": "2025-05-08T00:00:00Z", "date_only": false, "value": "2025-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f9d4d270-87f5-4956-ba6c-6d491c14789b"}, {"timestamp": "2025-05-08T00:00:00Z", "date_only": false, "value": "2025-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "92e849f3-3f57-47c5-94bd-35dc17f8100e"}, {"timestamp": "2025-05-09T00:00:00Z", "date_only": false, "value": "2025-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "926eacf1-e60e-4796-956e-7c040e78a7b9"}, {"timestamp": "2025-05-10T00:00:00Z", "date_only": false, "value": "2025-05-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "fd36347f-ecc0-4e50-b2ce-35f95e66bf67"}, {"timestamp": "2025-05-10T00:00:00Z", "date_only": false, "value": "2025-05-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "caf4fa91-40fa-4fc3-8c0d-722f7eeed260"}, {"timestamp": "2025-05-12T00:00:00Z", "date_only": false, "value": "2025-05-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "88a1e148-c03e-49ed-b705-a0ea4015c2f6"}, {"timestamp": "2025-05-13T00:00:00Z", "date_only": false, "value": "2025-05-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7a3140ee-1e8c-4b6f-b50c-22b959a5d52f"}, {"timestamp": "2025-05-14T00:00:00Z", "date_only": false, "value": "2025-05-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c08e96d4-9895-4315-9657-ec87a4eec395"}, {"timestamp": "2025-05-16T00:00:00Z", "date_only": false, "value": "2025-05-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "413cc8e7-e8b0-4f88-a7e4-f19bc103b967"}, {"timestamp": "2025-05-17T00:00:00Z", "date_only": false, "value": "2025-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "54b975a4-6067-40e1-8deb-81922f1bf220"}, {"timestamp": "2025-05-18T00:00:00Z", "date_only": false, "value": "2025-05-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "30544fea-0322-4a95-8280-33cf4f655db4"}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8554e078-3d0c-4749-ba62-0188d144ed78"}, {"timestamp": "2025-05-21T00:00:00Z", "date_only": false, "value": "2025-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c8ff35fc-aa41-4b4a-bf53-e938b8ca5c7d"}, {"timestamp": "2025-05-22T00:00:00Z", "date_only": false, "value": "2025-05-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "bbc02c7e-7291-41bc-9432-0412fd94857d"}, {"timestamp": "2025-05-23T00:00:00Z", "date_only": false, "value": "2025-05-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "786b7a3f-5875-4bbc-9e76-e842daca3c0e"}, {"timestamp": "2025-05-24T00:00:00Z", "date_only": false, "value": "2025-05-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6c6c0efd-9291-4f6c-8298-cf8bfa836ce7"}, {"timestamp": "2025-05-25T00:00:00Z", "date_only": false, "value": "2025-05-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "66f6c52a-51bb-465d-8f1f-6f66b35c59ae"}, {"timestamp": "2025-05-26T00:00:00Z", "date_only": false, "value": "2025-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "902a93de-4b4a-4a76-8c91-530e6ab2f35f"}, {"timestamp": "2025-05-28T00:00:00Z", "date_only": false, "value": "2025-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "621d1e7a-54ec-476d-a4fe-5dfa231ed6b0"}, {"timestamp": "2025-05-30T00:00:00Z", "date_only": false, "value": "2025-05-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0c6200c1-0ff9-494e-8191-9ea41ee3b2f6"}, {"timestamp": "2025-05-31T00:00:00Z", "date_only": false, "value": "2025-05-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-31)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "eb1bc78f-e67d-42df-aee0-27c17c3ca4f8"}, {"timestamp": "2025-05-31T00:00:00Z", "date_only": false, "value": "2025-05-31T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-31)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "bcaa0bc7-cb58-4e12-b843-1d3e60bd321c"}, {"timestamp": "2025-06-01T00:00:00Z", "date_only": false, "value": "2025-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9137f45f-4af2-47f7-bc81-0483845df699"}, {"timestamp": "2025-06-01T00:00:00Z", "date_only": false, "value": "2025-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "df51dd8e-23bc-4964-a5be-9f47179c5290"}, {"timestamp": "2025-06-02T00:00:00Z", "date_only": false, "value": "2025-06-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "22959ebb-1ff7-4792-ae81-2ce055257ea9"}, {"timestamp": "2025-06-04T00:00:00Z", "date_only": false, "value": "2025-06-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c7ec47ea-9d7f-4cf7-b17e-bc8b5b32ea81"}, {"timestamp": "2025-06-05T00:00:00Z", "date_only": false, "value": "2025-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "56a22902-e9d0-4385-ab16-593b14f1a093"}, {"timestamp": "2025-06-06T00:00:00Z", "date_only": false, "value": "2025-06-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "cbb4a219-484a-409b-8ae8-e11fb0ec10b1"}, {"timestamp": "2025-06-07T00:00:00Z", "date_only": false, "value": "2025-06-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0530b92f-9917-4b5f-ab05-8861501634b7"}, {"timestamp": "2025-06-08T00:00:00Z", "date_only": false, "value": "2025-06-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "069c0ea0-74d4-4e6c-a81c-ef50073c88f6"}, {"timestamp": "2025-06-09T00:00:00Z", "date_only": false, "value": "2025-06-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c559bbf3-26ea-4887-9041-5e3290383f2a"}, {"timestamp": "2025-06-12T00:00:00Z", "date_only": false, "value": "2025-06-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "051904ba-bf57-437e-916c-a75dee68b269"}, {"timestamp": "2025-06-15T00:00:00Z", "date_only": false, "value": "2025-06-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "605d8f76-0ca1-4037-b6f9-4e314880dd6e"}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e09d24ce-af6c-4d24-8701-12b1748e16e0"}, {"timestamp": "2025-06-17T00:00:00Z", "date_only": false, "value": "2025-06-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "bb8e94a1-de5f-461d-bd09-ed29cee78a92"}, {"timestamp": "2025-06-18T00:00:00Z", "date_only": false, "value": "2025-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "309f59f7-8849-47b8-8d60-acb6f339396c"}, {"timestamp": "2025-06-18T00:00:00Z", "date_only": false, "value": "2025-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d23fb9bb-f56b-4078-b40b-224a070d9718"}, {"timestamp": "2025-06-19T00:00:00Z", "date_only": false, "value": "2025-06-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7fe9ceb4-acee-48cb-9e7d-d74cb0fa85e3"}, {"timestamp": "2025-06-20T00:00:00Z", "date_only": false, "value": "2025-06-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a3cfc339-227c-4140-ba7f-09c697688488"}, {"timestamp": "2025-06-25T00:00:00Z", "date_only": false, "value": "2025-06-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0a007765-533f-4f8b-814c-455619e76912"}, {"timestamp": "2025-06-28T00:00:00Z", "date_only": false, "value": "2025-06-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f8532db6-60e1-4d87-9fcf-b1a757749754"}, {"timestamp": "2025-06-29T00:00:00Z", "date_only": false, "value": "2025-06-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "bc88860e-80cf-43e5-8e9b-271e9650b46c"}, {"timestamp": "2025-06-30T00:00:00Z", "date_only": false, "value": "2025-06-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "53f1d304-60aa-49b7-bca0-4495e4cde05b"}, {"timestamp": "2025-07-01T00:00:00Z", "date_only": false, "value": "2025-07-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1acc71cd-72f9-4b5c-861e-d7ac6b59bfb5"}, {"timestamp": "2025-07-01T21:18:45Z", "date_only": false, "value": "2025-07-01T21:18:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/90e532fb-4efa-4ff2-95ab-ddaf25454791", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7dabab5c-dc1d-49e4-a751-2b88383c64d2"}, {"timestamp": "2025-07-03T00:00:00Z", "date_only": false, "value": "2025-07-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2a9cafe0-4576-4217-988f-6907edadeaf6"}, {"timestamp": "2025-07-04T00:00:00Z", "date_only": false, "value": "2025-07-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3e676c2a-fe5f-42ca-b5f8-bb2e649bec4f"}, {"timestamp": "2025-07-06T00:00:00Z", "date_only": false, "value": "2025-07-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d7d9d040-654d-44b1-9c93-5aa76b0ab7cf"}, {"timestamp": "2025-07-09T00:00:00Z", "date_only": false, "value": "2025-07-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "98da897d-c9f9-4abf-a073-32ccd98004b3"}, {"timestamp": "2025-07-11T00:00:00Z", "date_only": false, "value": "2025-07-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "dd17dc1a-85e6-44bc-aea5-693c95d77cbe"}, {"timestamp": "2025-07-12T00:00:00Z", "date_only": false, "value": "2025-07-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "cdc5802f-d993-43f2-a5d4-0a48417a1897"}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "78c9bdfa-7bb1-49dd-bc0f-48b43541b237"}, {"timestamp": "2025-07-15T00:00:00Z", "date_only": false, "value": "2025-07-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ba5a73b5-2237-4988-8886-14a45251d524"}, {"timestamp": "2025-07-16T00:00:00Z", "date_only": false, "value": "2025-07-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ba869d41-f508-4ad7-b525-11f9310786a2"}, {"timestamp": "2025-07-17T00:00:00Z", "date_only": false, "value": "2025-07-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1f00518a-4f57-4560-b866-2b267c205f61"}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": false, "value": "2025-07-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "59740cdf-609a-4141-8cb4-78b378773374"}, {"timestamp": "2025-07-22T00:00:00Z", "date_only": false, "value": "2025-07-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f87a8356-2a79-4eef-89ef-30a557d9a98f"}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": false, "value": "2025-07-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ba3cfacc-be56-4285-959f-8d49f387201e"}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": false, "value": "2025-07-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "df0410ea-3855-4a3c-8820-236413703039"}, {"timestamp": "2025-07-25T00:00:00Z", "date_only": false, "value": "2025-07-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "97e91582-0a71-4d17-b945-4afd44ae3f04"}, {"timestamp": "2025-07-25T00:00:00Z", "date_only": false, "value": "2025-07-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "86b0ae09-e060-4b8d-aeb3-065ea6f043e8"}, {"timestamp": "2025-07-26T00:00:00Z", "date_only": false, "value": "2025-07-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "822eca38-d997-46cb-868d-b64a45954c03"}, {"timestamp": "2025-07-28T00:00:00Z", "date_only": false, "value": "2025-07-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2e36eeaa-449c-4cc8-a32b-99f3974185d2"}, {"timestamp": "2025-07-28T00:00:00Z", "date_only": false, "value": "2025-07-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4327dc85-b156-4913-b3b2-5a339ce3396a"}, {"timestamp": "2025-07-29T00:00:00Z", "date_only": false, "value": "2025-07-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "43ed6a31-d118-4bee-a8fe-166743a2b2b4"}, {"timestamp": "2025-08-01T00:00:00Z", "date_only": false, "value": "2025-08-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6d77cd14-05b7-487e-b3d1-89ee47fedc9d"}, {"timestamp": "2025-08-02T00:00:00Z", "date_only": false, "value": "2025-08-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6908a958-cca6-4edd-985f-ba87d366ed45"}, {"timestamp": "2025-08-03T00:00:00Z", "date_only": false, "value": "2025-08-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "765b75d1-d8b0-49be-a1b5-7ab28ac595b2"}, {"timestamp": "2025-08-03T00:00:00Z", "date_only": false, "value": "2025-08-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "700de9ac-d1a0-48e3-9774-01e8be1363f6"}, {"timestamp": "2025-08-04T00:00:00Z", "date_only": false, "value": "2025-08-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "86fe0fac-9b21-4aef-acd1-8563102bf24d"}, {"timestamp": "2025-08-05T00:00:00Z", "date_only": false, "value": "2025-08-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "49697778-a6d6-4aeb-a19a-3a951c5d492f"}, {"timestamp": "2025-08-06T00:00:00Z", "date_only": false, "value": "2025-08-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f6cc9926-8b70-4556-956a-d3dd6168ec24"}, {"timestamp": "2025-08-07T00:00:00Z", "date_only": false, "value": "2025-08-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c1f5281d-edd8-4965-a079-ef65af3c9fa5"}, {"timestamp": "2025-08-08T00:00:00Z", "date_only": false, "value": "2025-08-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7617f966-0556-4652-ae8f-7b0b65ff6473"}, {"timestamp": "2025-08-09T00:00:00Z", "date_only": false, "value": "2025-08-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "65471a80-38b3-40d3-9c70-26522dba962a"}, {"timestamp": "2025-08-10T00:00:00Z", "date_only": false, "value": "2025-08-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e87c1b7e-cc95-48bc-8f97-b78acd015fc1"}, {"timestamp": "2025-08-10T00:00:00Z", "date_only": false, "value": "2025-08-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "11b8c70a-ed34-4612-a418-537f8a35fb49"}, {"timestamp": "2025-08-11T00:00:00Z", "date_only": false, "value": "2025-08-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a2981142-cd7c-410a-8022-8443526b41fd"}, {"timestamp": "2025-08-11T00:00:00Z", "date_only": false, "value": "2025-08-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "566f9989-40ee-4a0d-beb1-6b4fdd625731"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ed6c8add-271d-4cac-b1aa-eaab53e224e2"}, {"timestamp": "2025-08-13T00:00:00Z", "date_only": false, "value": "2025-08-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5b78a0da-0a6a-4a84-ba0e-b94780fc3167"}, {"timestamp": "2025-08-14T00:00:00Z", "date_only": false, "value": "2025-08-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ac2bc97f-cf9e-4994-b016-304bbaf67b9a"}, {"timestamp": "2025-08-14T00:00:00Z", "date_only": false, "value": "2025-08-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a2b75ef0-40ac-4d0c-bab8-aacbb7a611cf"}, {"timestamp": "2025-08-15T00:00:00Z", "date_only": false, "value": "2025-08-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a16e3d69-16ca-4220-afe4-a4f6544b9535"}, {"timestamp": "2025-08-15T00:00:00Z", "date_only": false, "value": "2025-08-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "973464d7-a735-4060-9a91-98a037a0e1bf"}, {"timestamp": "2025-08-16T00:00:00Z", "date_only": false, "value": "2025-08-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "cbb23459-1af9-4121-b41c-5668a48427c1"}, {"timestamp": "2025-08-16T00:00:00Z", "date_only": false, "value": "2025-08-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b7b735bf-4c69-4f1e-b434-69b8f38dadb7"}, {"timestamp": "2025-08-17T00:00:00Z", "date_only": false, "value": "2025-08-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d5eef78b-7f60-462b-8d91-1deec6a16701"}, {"timestamp": "2025-08-17T00:00:00Z", "date_only": false, "value": "2025-08-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7d39e9f3-4ffa-495c-929a-79b1c88db957"}, {"timestamp": "2025-08-18T00:00:00Z", "date_only": false, "value": "2025-08-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "804c090b-4efe-4a80-833e-20d4686023dd"}, {"timestamp": "2025-08-19T00:00:00Z", "date_only": false, "value": "2025-08-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1d0db9bc-692e-435c-ad63-b755c5467142"}, {"timestamp": "2025-08-20T00:00:00Z", "date_only": false, "value": "2025-08-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "dc538b20-d748-4c98-b5c0-489b1ca525a5"}, {"timestamp": "2025-08-20T00:00:00Z", "date_only": false, "value": "2025-08-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3a34fe87-651b-4039-a156-5de2774e004c"}, {"timestamp": "2025-08-21T00:00:00Z", "date_only": false, "value": "2025-08-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "246bb3a6-8993-45c1-a7ad-7c32f3e7b243"}, {"timestamp": "2025-08-22T00:00:00Z", "date_only": false, "value": "2025-08-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a2cb7aa5-db16-4fe4-a295-f322e16fd045"}, {"timestamp": "2025-08-23T00:00:00Z", "date_only": false, "value": "2025-08-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b69d1b0d-860f-4664-bc17-ed8dd1281208"}, {"timestamp": "2025-08-24T00:00:00Z", "date_only": false, "value": "2025-08-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ac9fae71-6256-4fd5-be56-ba26c149c77b"}, {"timestamp": "2025-08-25T00:00:00Z", "date_only": false, "value": "2025-08-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "91c5bf40-4278-460c-be8b-33bd0d2417d0"}, {"timestamp": "2025-08-26T00:00:00Z", "date_only": false, "value": "2025-08-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "754800bc-698c-4e0e-b1e8-4f1e5688810b"}, {"timestamp": "2025-08-28T00:00:00Z", "date_only": false, "value": "2025-08-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2939230b-a422-492c-bf36-fe94f8d19480"}, {"timestamp": "2025-08-29T00:00:00Z", "date_only": false, "value": "2025-08-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3219abbc-7647-4587-a44b-8b7e7acd63a8"}, {"timestamp": "2025-08-31T00:00:00Z", "date_only": false, "value": "2025-08-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-31)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "23e86f06-dc53-4c3a-a423-e47cbd1329b2"}, {"timestamp": "2025-08-31T03:01:04Z", "date_only": false, "value": "2025-08-31T03:01:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ab1b33d0-459d-49d2-97ef-4e29a3962126"}, {"timestamp": "2025-08-31T03:12:45Z", "date_only": false, "value": "2025-08-31T03:12:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d64b1dce-9a09-489a-a9c7-5c677ff40ebb"}, {"timestamp": "2025-09-01T00:00:00Z", "date_only": false, "value": "2025-09-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b76e72d0-89c1-4dd0-872e-73b7fbf04bd5"}, {"timestamp": "2025-09-02T00:00:00Z", "date_only": false, "value": "2025-09-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6667f24c-ece2-4ce2-ba07-26ce1baf49d5"}, {"timestamp": "2025-09-02T10:30:13Z", "date_only": false, "value": "2025-09-02T10:30:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/9c5365908f4220758149d88783ef4767", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "70c53538-9a4d-4d95-a7ee-d6abc88ec5f0", "url": "https://gist.github.com/Darkcrai86/9c5365908f4220758149d88783ef4767"}, {"timestamp": "2025-09-03T00:00:00Z", "date_only": false, "value": "2025-09-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7e3643ea-af04-416a-adbf-fc9356271dd7"}, {"timestamp": "2025-09-04T00:00:00Z", "date_only": false, "value": "2025-09-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8b39758d-5261-475a-bf94-9da1dca99c88"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a1e63cb2-8be9-4e81-8f9f-5efc37e56b08"}, {"timestamp": "2025-09-06T00:00:00Z", "date_only": false, "value": "2025-09-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f5a2b160-ec21-4040-837b-d58fa67932a6"}, {"timestamp": "2025-09-07T00:00:00Z", "date_only": false, "value": "2025-09-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c6c850ea-7a11-454a-887d-43a6957595c3"}, {"timestamp": "2025-09-08T00:00:00Z", "date_only": false, "value": "2025-09-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5c4da96e-4055-43a5-a038-9415a062ca0c"}, {"timestamp": "2025-09-08T00:00:00Z", "date_only": false, "value": "2025-09-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "95eb15f5-0568-4c30-a129-2389f213ec04"}, {"timestamp": "2025-09-09T00:00:00Z", "date_only": false, "value": "2025-09-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "85c9cd6c-a3d9-4cdc-9f52-a76acc699093"}, {"timestamp": "2025-09-10T00:00:00Z", "date_only": false, "value": "2025-09-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9baaf3fb-624d-46fe-a32d-7fabaaf3a2dc"}, {"timestamp": "2025-09-11T00:00:00Z", "date_only": false, "value": "2025-09-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a7e69978-25e1-4304-bbfc-82fa348dc89c"}, {"timestamp": "2025-09-12T00:00:00Z", "date_only": false, "value": "2025-09-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b06d5dbc-83c8-4bd4-8681-3574eccdc805"}, {"timestamp": "2025-09-12T00:00:00Z", "date_only": false, "value": "2025-09-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "33e9e556-20bf-41a0-a57c-c63855923e79"}, {"timestamp": "2025-09-13T00:00:00Z", "date_only": false, "value": "2025-09-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7325a476-6e45-4fba-9a6e-148fdf3c23c5"}, {"timestamp": "2025-09-13T00:00:00Z", "date_only": false, "value": "2025-09-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d4f3321f-696a-498a-9417-02a90f217fd1"}, {"timestamp": "2025-09-14T00:00:00Z", "date_only": false, "value": "2025-09-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4d7eecc2-e9c0-4480-9d85-bc89a133198f"}, {"timestamp": "2025-09-15T00:00:00Z", "date_only": false, "value": "2025-09-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "47d718b6-c146-4446-b880-26f56205f4cc"}, {"timestamp": "2025-09-15T00:00:00Z", "date_only": false, "value": "2025-09-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3ebe7b80-bec6-4f28-a178-c7fc7dee8663"}, {"timestamp": "2025-09-16T00:00:00Z", "date_only": false, "value": "2025-09-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0e09565b-36ed-4a55-95ca-f978a082de35"}, {"timestamp": "2025-09-17T00:00:00Z", "date_only": false, "value": "2025-09-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8cfedca7-e3c9-43f8-b9d8-ba47c15a2732"}, {"timestamp": "2025-09-18T00:00:00Z", "date_only": false, "value": "2025-09-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6dfb8266-2c92-4725-b53e-61e9861cf84d"}, {"timestamp": "2025-09-19T00:00:00Z", "date_only": false, "value": "2025-09-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3fe50a04-707a-40ab-8c3e-04d72291aca1"}, {"timestamp": "2025-09-21T00:00:00Z", "date_only": false, "value": "2025-09-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7a968f11-209a-4f75-af4d-ea33140ddf21"}, {"timestamp": "2025-09-22T00:00:00Z", "date_only": false, "value": "2025-09-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c207c2f7-2bbd-440a-bd3b-5cdc462074ad"}, {"timestamp": "2025-09-22T00:00:00Z", "date_only": false, "value": "2025-09-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f06ad0f7-7d06-4fd7-a112-374c96a5b1e0"}, {"timestamp": "2025-09-24T00:00:00Z", "date_only": false, "value": "2025-09-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c91372c6-7332-4441-9905-35af3afd1622"}, {"timestamp": "2025-09-24T00:00:00Z", "date_only": false, "value": "2025-09-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c4452432-b8c9-4d0a-980a-bcdf4899767f"}, {"timestamp": "2025-09-26T00:00:00Z", "date_only": false, "value": "2025-09-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1c5c71ca-b8af-48cc-b94a-11aaf11d71ac"}, {"timestamp": "2025-09-27T00:00:00Z", "date_only": false, "value": "2025-09-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "34826b45-a306-49d9-ad80-a5efb18162c5"}, {"timestamp": "2025-09-30T00:00:00Z", "date_only": false, "value": "2025-09-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d375f72b-f5fc-4195-ae78-a23526ad0127"}, {"timestamp": "2025-10-01T00:00:00Z", "date_only": false, "value": "2025-10-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f2813a05-e7a4-4f41-8d59-16827091d806"}, {"timestamp": "2025-10-01T00:00:00Z", "date_only": false, "value": "2025-10-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4a0be727-9ffc-49c8-ad89-1a8848d4f66d"}, {"timestamp": "2025-10-02T00:00:00Z", "date_only": false, "value": "2025-10-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b3e2e377-9bbd-41e1-b737-8ad05649165a"}, {"timestamp": "2025-10-02T00:00:00Z", "date_only": false, "value": "2025-10-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "28a1125f-cd62-413e-a246-c27461ee5ada"}, {"timestamp": "2025-10-03T00:00:00Z", "date_only": false, "value": "2025-10-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d10ffd6a-649d-4ea5-b6a8-e5a6768a3aa6"}, {"timestamp": "2025-10-03T00:00:00Z", "date_only": false, "value": "2025-10-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "72829929-f6e2-40a8-9641-68143c5beccd"}, {"timestamp": "2025-10-04T00:00:00Z", "date_only": false, "value": "2025-10-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1f7e09f4-96b1-414c-b338-ba764ce87d92"}, {"timestamp": "2025-10-05T00:00:00Z", "date_only": false, "value": "2025-10-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "67e12618-44be-4ba3-b5f7-3ee707187a1a"}, {"timestamp": "2025-10-06T00:00:00Z", "date_only": false, "value": "2025-10-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e8d4448a-ebde-4d56-81e3-7729feae217b"}, {"timestamp": "2025-10-07T00:00:00Z", "date_only": false, "value": "2025-10-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c1ef5508-e08e-4412-9c17-ddd9eacbe1be"}, {"timestamp": "2025-10-08T00:00:00Z", "date_only": false, "value": "2025-10-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9837f540-dd3b-46d7-93d7-27921e3b7844"}, {"timestamp": "2025-10-09T00:00:00Z", "date_only": false, "value": "2025-10-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c5d9ad96-bcd9-4b58-a0d1-f8f7f872a527"}, {"timestamp": "2025-10-10T00:00:00Z", "date_only": false, "value": "2025-10-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "df816f86-c9b6-4bfe-b527-218261de12bd"}, {"timestamp": "2025-10-10T00:00:00Z", "date_only": false, "value": "2025-10-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e8e50f17-c9ff-4d73-ae16-9eec9df862d6"}, {"timestamp": "2025-10-11T00:00:00Z", "date_only": false, "value": "2025-10-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "aeb56bb7-1fb7-4744-8931-0cf015f6caef"}, {"timestamp": "2025-10-12T00:00:00Z", "date_only": false, "value": "2025-10-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4799c936-2c6b-4ed5-b2dc-0d8d5ba1f3fc"}, {"timestamp": "2025-10-12T00:00:00Z", "date_only": false, "value": "2025-10-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8f3cca63-8b6f-4b1f-8907-f6cbcb75704b"}, {"timestamp": "2025-10-13T00:00:00Z", "date_only": false, "value": "2025-10-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b5a23ac9-9c64-48e1-bb5d-779d2b715cc4"}, {"timestamp": "2025-10-14T00:00:00Z", "date_only": false, "value": "2025-10-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3b046b9e-78ca-430b-b902-acfb4e59fccb"}, {"timestamp": "2025-10-15T00:00:00Z", "date_only": false, "value": "2025-10-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "95251b85-75ac-4324-86a0-65d78674e0c0"}, {"timestamp": "2025-10-15T00:00:00Z", "date_only": false, "value": "2025-10-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "46686697-fde3-4615-9589-41fee9924dc9"}, {"timestamp": "2025-10-16T00:00:00Z", "date_only": false, "value": "2025-10-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "87601a73-aed0-4ba1-8b54-18c7cb5c0f05"}, {"timestamp": "2025-10-16T00:00:00Z", "date_only": false, "value": "2025-10-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5c15cb44-ed70-440d-80b3-8e6844d8a32b"}, {"timestamp": "2025-10-17T00:00:00Z", "date_only": false, "value": "2025-10-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6ced3ceb-7df9-448e-92d2-9c27e3303094"}, {"timestamp": "2025-10-17T00:00:00Z", "date_only": false, "value": "2025-10-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "874f75c1-dc58-482a-87fa-4bb39801dda6"}, {"timestamp": "2025-10-18T00:00:00Z", "date_only": false, "value": "2025-10-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2048c860-bdbe-4630-b07f-2d3c99664134"}, {"timestamp": "2025-10-19T00:00:00Z", "date_only": false, "value": "2025-10-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "aa3678c1-7363-435e-868b-dca118ff6dec"}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": false, "value": "2025-10-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "51746541-dad8-4ce6-baf6-e51ad57a41ba"}, {"timestamp": "2025-10-21T00:00:00Z", "date_only": false, "value": "2025-10-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "953f218f-d7af-4ab5-b69a-088c1be1b97c"}, {"timestamp": "2025-10-22T00:00:00Z", "date_only": false, "value": "2025-10-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5d5d0e90-61a0-416a-97bb-cb0e31f41f32"}, {"timestamp": "2025-10-23T00:00:00Z", "date_only": false, "value": "2025-10-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "215754b8-cc19-47b2-8d0e-f54500524127"}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": false, "value": "2025-10-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1c77f7b3-3bb6-46f6-ba7d-7b3d82c72e16"}, {"timestamp": "2025-10-25T00:00:00Z", "date_only": false, "value": "2025-10-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8c7f34c8-e79a-4e4f-a9a8-8ab7f78a801e"}, {"timestamp": "2025-10-26T00:00:00Z", "date_only": false, "value": "2025-10-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6aee97e6-d77e-4b91-b5f4-fecddadec1ce"}, {"timestamp": "2025-10-27T00:00:00Z", "date_only": false, "value": "2025-10-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "28d36a27-549f-4abb-b830-308a2b96bc93"}, {"timestamp": "2025-10-28T00:00:00Z", "date_only": false, "value": "2025-10-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "509fb4df-9247-4035-a006-896feeab5e38"}, {"timestamp": "2025-10-28T00:00:00Z", "date_only": false, "value": "2025-10-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9a68c1fb-b1f6-45e5-906a-3db4be960e56"}, {"timestamp": "2025-10-29T00:00:00Z", "date_only": false, "value": "2025-10-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "17da9b4e-869e-4502-9771-71cfa71dc78e"}, {"timestamp": "2025-10-29T00:00:00Z", "date_only": false, "value": "2025-10-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "775b7705-d3dd-49ba-8f4c-d6ecfee61e51"}, {"timestamp": "2025-10-30T00:00:00Z", "date_only": false, "value": "2025-10-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d50975d8-9ed6-4581-aef4-fe7ac7947487"}, {"timestamp": "2025-10-31T00:00:00Z", "date_only": false, "value": "2025-10-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-31)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "070e826a-1cf3-4e63-96fa-6b597e15477e"}, {"timestamp": "2025-11-01T00:00:00Z", "date_only": false, "value": "2025-11-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "57942e5e-c30e-4d90-9b1b-0e4490f20ef7"}, {"timestamp": "2025-11-01T00:00:00Z", "date_only": false, "value": "2025-11-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1bf4e33a-77e0-4c13-9b6b-664e35878fc5"}, {"timestamp": "2025-11-02T00:00:00Z", "date_only": false, "value": "2025-11-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b620760a-c088-4df8-a770-c3bcce6e54d2"}, {"timestamp": "2025-11-03T00:00:00Z", "date_only": false, "value": "2025-11-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2e340804-c7bd-4064-9f74-a09e376e10aa"}, {"timestamp": "2025-11-03T00:00:00Z", "date_only": false, "value": "2025-11-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "882d2afb-34ac-4718-8184-aebc4202c22c"}, {"timestamp": "2025-11-04T00:00:00Z", "date_only": false, "value": "2025-11-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1ce7c343-e35a-4829-9a36-a126123db2d1"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "30f15df2-5914-4dd9-8f82-11dabd5eb478"}, {"timestamp": "2025-11-05T00:00:00Z", "date_only": false, "value": "2025-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9d7fb3fe-d757-45bc-9aa0-cb6490ad4ad0"}, {"timestamp": "2025-11-06T00:00:00Z", "date_only": false, "value": "2025-11-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "44b8241a-2b88-4994-a39c-5eb1d3a3bd42"}, {"timestamp": "2025-11-07T00:00:00Z", "date_only": false, "value": "2025-11-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4f3e53d4-ca13-43fb-a091-6896e079e928"}, {"timestamp": "2025-11-08T00:00:00Z", "date_only": false, "value": "2025-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3ee0421e-ad29-41bc-b71a-08f58509b457"}, {"timestamp": "2025-11-09T00:00:00Z", "date_only": false, "value": "2025-11-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "fbad922b-1049-4615-8b2b-865554422eae"}, {"timestamp": "2025-11-10T00:00:00Z", "date_only": false, "value": "2025-11-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "19945aed-95f3-452a-8ea4-886176f80dfe"}, {"timestamp": "2025-11-12T00:00:00Z", "date_only": false, "value": "2025-11-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "bafed780-9843-4bc5-88c8-624a226b21d7"}, {"timestamp": "2025-11-13T00:00:00Z", "date_only": false, "value": "2025-11-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1a7e3c1b-8df8-40cc-abfe-6c3a963f2bc6"}, {"timestamp": "2025-11-14T00:00:00Z", "date_only": false, "value": "2025-11-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c777325a-61d7-4917-9727-e916e61d6ae0"}, {"timestamp": "2025-11-15T00:00:00Z", "date_only": false, "value": "2025-11-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "25561155-dca0-40ad-9732-28e0876af643"}, {"timestamp": "2025-11-16T00:00:00Z", "date_only": false, "value": "2025-11-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4741549e-6f06-43fe-94c4-885edaf13281"}, {"timestamp": "2025-11-17T00:00:00Z", "date_only": false, "value": "2025-11-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "07412cac-b367-4548-b5b0-d928d81bcbe6"}, {"timestamp": "2025-11-18T00:00:00Z", "date_only": false, "value": "2025-11-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "462e2970-dbc6-41df-a78d-693fbdea021e"}, {"timestamp": "2025-11-19T00:00:00Z", "date_only": false, "value": "2025-11-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2fbba4f9-2472-4f48-981b-b3e96ec72b7b"}, {"timestamp": "2025-11-20T00:00:00Z", "date_only": false, "value": "2025-11-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1e273996-7f7f-403a-aadf-9d9fa5190c57"}, {"timestamp": "2025-11-20T00:00:00Z", "date_only": false, "value": "2025-11-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "044113b9-f709-4a12-be5d-c3f74ae194f5"}, {"timestamp": "2025-11-21T00:00:00Z", "date_only": false, "value": "2025-11-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "41ce9fbc-7097-4c9e-b26e-32e37e6a10a5"}, {"timestamp": "2025-11-23T00:00:00Z", "date_only": false, "value": "2025-11-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4a2df80f-1ad5-4a70-9e3e-c54f2e306880"}, {"timestamp": "2025-11-23T00:00:00Z", "date_only": false, "value": "2025-11-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0e1e3200-096b-48dd-9931-fb581d70dc7d"}, {"timestamp": "2025-11-24T00:00:00Z", "date_only": false, "value": "2025-11-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ad2e6b87-9aeb-4ae6-99ab-812e6ff6503b"}, {"timestamp": "2025-11-24T00:00:00Z", "date_only": false, "value": "2025-11-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d5ba0559-eef7-497e-ab10-bf35131dd72b"}, {"timestamp": "2025-11-25T00:00:00Z", "date_only": false, "value": "2025-11-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6433adcc-2b95-44c9-b879-2353209b0dee"}, {"timestamp": "2025-11-26T00:00:00Z", "date_only": false, "value": "2025-11-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "767cb9be-921f-47af-9cba-9eb9b03f23ad"}, {"timestamp": "2025-11-28T00:00:00Z", "date_only": false, "value": "2025-11-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "db71811b-8f78-479f-b2e6-b6e734cd2eff"}, {"timestamp": "2025-11-29T00:00:00Z", "date_only": false, "value": "2025-11-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a8f117a6-3fe7-4a69-b928-b0778bb6f8d3"}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": false, "value": "2025-12-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c9df73a5-614c-4907-a281-fe8d30702c41"}, {"timestamp": "2025-12-02T00:00:00Z", "date_only": false, "value": "2025-12-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "48a81656-cddb-4851-a471-0b0f7600306e"}, {"timestamp": "2025-12-04T00:00:00Z", "date_only": false, "value": "2025-12-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "059f0e8f-24b2-4870-b6ed-693cfa5b8102"}, {"timestamp": "2025-12-05T00:00:00Z", "date_only": false, "value": "2025-12-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "46ad5a54-7451-4512-a8cb-5235857d787c"}, {"timestamp": "2025-12-07T00:00:00Z", "date_only": false, "value": "2025-12-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "363fb0fc-e494-4811-b869-67cb0288320a"}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "40f06280-8354-46b9-a55f-acfc2eeb5845"}, {"timestamp": "2025-12-10T00:00:00Z", "date_only": false, "value": "2025-12-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "dee53d89-95b1-4b98-895c-708150262db6"}, {"timestamp": "2025-12-11T00:00:00Z", "date_only": false, "value": "2025-12-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "853ec63e-8e34-4906-8f3b-7205101ffe0a"}, {"timestamp": "2025-12-11T00:00:00Z", "date_only": false, "value": "2025-12-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4a4be3e5-e36a-4416-8def-2e92e1b86502"}, {"timestamp": "2025-12-12T00:00:00Z", "date_only": false, "value": "2025-12-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3efa7fdf-9641-4936-9cc6-3d9cb7cf9a6f"}, {"timestamp": "2025-12-12T00:00:00Z", "date_only": false, "value": "2025-12-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5e50edc9-d553-47e9-9f3f-8bfbc21ce3ad"}, {"timestamp": "2025-12-13T00:00:00Z", "date_only": false, "value": "2025-12-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "56be9c31-5d9d-45d6-be73-e274dec4fc9e"}, {"timestamp": "2025-12-14T00:00:00Z", "date_only": false, "value": "2025-12-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "122c14cf-f4dc-4e86-8204-217edf0110a6"}, {"timestamp": "2025-12-15T00:00:00Z", "date_only": false, "value": "2025-12-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0f895acb-2765-439e-84f0-835ad41a8469"}, {"timestamp": "2025-12-17T00:00:00Z", "date_only": false, "value": "2025-12-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e5df77be-161f-4aff-a571-eea7ba35c712"}, {"timestamp": "2025-12-18T00:00:00Z", "date_only": false, "value": "2025-12-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "998441cf-4a5f-4b4e-bb6a-be83466cf942"}, {"timestamp": "2025-12-18T00:00:00Z", "date_only": false, "value": "2025-12-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f3c09fb4-c587-4bda-a79d-0f7a82d3551b"}, {"timestamp": "2025-12-18T16:54:20Z", "date_only": false, "value": "2025-12-18T16:54:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Smasher462/e23ed6e9194389fda6c7fc35fc64ed46", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0a9c610c-1ae1-4992-9c26-69c5d46ec6ce", "url": "https://gist.github.com/Smasher462/e23ed6e9194389fda6c7fc35fc64ed46"}, {"timestamp": "2025-12-19T00:00:00Z", "date_only": false, "value": "2025-12-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "fef00ff2-c83b-43f0-971b-0883eeb8e74d"}, {"timestamp": "2025-12-20T00:00:00Z", "date_only": false, "value": "2025-12-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "afbb068b-ac69-42ec-88f9-b84a40a4370d"}, {"timestamp": "2025-12-20T00:00:00Z", "date_only": false, "value": "2025-12-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f20bd76d-0d4f-473d-950f-ef41990ecede"}, {"timestamp": "2025-12-21T00:00:00Z", "date_only": false, "value": "2025-12-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5a824e01-7c54-4506-bf81-4e7b3a85a5bb"}, {"timestamp": "2025-12-22T00:00:00Z", "date_only": false, "value": "2025-12-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "00d5b058-1849-4d87-b7c7-dc4820b1f78e"}, {"timestamp": "2025-12-23T00:00:00Z", "date_only": false, "value": "2025-12-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "df9423f6-3642-4c45-a431-679819d5eca9"}, {"timestamp": "2025-12-23T00:00:00Z", "date_only": false, "value": "2025-12-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f4f7995b-a443-4144-85cb-21e4e7725f60"}, {"timestamp": "2025-12-24T00:00:00Z", "date_only": false, "value": "2025-12-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9345c3c1-8ad6-4e7e-8602-f8d1f54d5ff5"}, {"timestamp": "2025-12-24T00:00:00Z", "date_only": false, "value": "2025-12-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "98397790-0f26-4d2d-a33c-a2c8ab26cfc3"}, {"timestamp": "2025-12-26T00:00:00Z", "date_only": false, "value": "2025-12-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d1e2cb36-7300-44a6-9f7a-18a05670ae78"}, {"timestamp": "2025-12-27T00:00:00Z", "date_only": false, "value": "2025-12-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6322b4a1-9b54-41ab-b16e-fddaa3835971"}, {"timestamp": "2025-12-29T00:00:00Z", "date_only": false, "value": "2025-12-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f6243658-acec-4951-b05e-e5fff897c309"}, {"timestamp": "2025-12-29T00:00:00Z", "date_only": false, "value": "2025-12-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8afbabda-83a8-4718-a36d-1d3eae60c9b1"}, {"timestamp": "2025-12-30T00:00:00Z", "date_only": false, "value": "2025-12-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9adba5c3-4507-40b5-9aab-642e77198ffd"}, {"timestamp": "2026-01-01T00:00:00Z", "date_only": false, "value": "2026-01-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "24d04008-2c99-4c4b-a793-c84d5647989e"}, {"timestamp": "2026-01-01T00:00:00Z", "date_only": false, "value": "2026-01-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "60cacbf4-fae7-448a-9a9f-d59fffde4be0"}, {"timestamp": "2026-01-03T00:00:00Z", "date_only": false, "value": "2026-01-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0c84dc35-eda0-42e7-b489-11f5c3b66284"}, {"timestamp": "2026-01-04T00:00:00Z", "date_only": false, "value": "2026-01-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0a55d5bc-5709-45b4-bf53-9dfaa340cc64"}, {"timestamp": "2026-01-06T00:00:00Z", "date_only": false, "value": "2026-01-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "99f2d0f4-f03e-46f6-a384-a8a3042585d9"}, {"timestamp": "2026-01-06T00:00:00Z", "date_only": false, "value": "2026-01-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "79ad09ab-2a00-4df2-b658-70e2b13b4a5b"}, {"timestamp": "2026-01-07T00:00:00Z", "date_only": false, "value": "2026-01-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c4d7c012-1911-405b-ac03-f5227a329818"}, {"timestamp": "2026-01-08T00:00:00Z", "date_only": false, "value": "2026-01-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a3c1b2b2-e507-4b6d-b23d-e5446d8bebb4"}, {"timestamp": "2026-01-09T00:00:00Z", "date_only": false, "value": "2026-01-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "16e18305-6097-4a2f-8c38-43e0a2182de4"}, {"timestamp": "2026-01-09T00:00:00Z", "date_only": false, "value": "2026-01-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9064c99c-2ec0-4510-ac53-4009c4bb62bc"}, {"timestamp": "2026-01-10T00:00:00Z", "date_only": false, "value": "2026-01-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "582b8c19-7f58-4df4-82e6-50564c8d2401"}, {"timestamp": "2026-01-10T00:00:00Z", "date_only": false, "value": "2026-01-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ef698e9e-3d84-421c-96e7-aad4725fe08c"}, {"timestamp": "2026-01-11T00:00:00Z", "date_only": false, "value": "2026-01-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f5e81c46-26a8-4c6a-95d3-8f2bc5aad39a"}, {"timestamp": "2026-01-11T00:00:00Z", "date_only": false, "value": "2026-01-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e85bf25f-b798-440d-9342-9f950c32d159"}, {"timestamp": "2026-01-12T00:00:00Z", "date_only": false, "value": "2026-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4ee77f9a-ed77-4eb0-a909-879b50453baa"}, {"timestamp": "2026-01-12T00:00:00Z", "date_only": false, "value": "2026-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "52e9975d-1054-4bbe-9f7c-9df566cb0566"}, {"timestamp": "2026-01-13T00:00:00Z", "date_only": false, "value": "2026-01-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7d60cc4b-7550-483b-ae2e-863d5a6f4ba7"}, {"timestamp": "2026-01-13T00:00:00Z", "date_only": false, "value": "2026-01-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c703f24d-4899-43f8-a99b-09a7c3984828"}, {"timestamp": "2026-01-15T00:00:00Z", "date_only": false, "value": "2026-01-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "360ff802-7eda-4f6e-b0e1-6c6cc3084870"}, {"timestamp": "2026-01-16T00:00:00Z", "date_only": false, "value": "2026-01-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "563b1c3a-7cbb-467d-ae82-179c296255f6"}, {"timestamp": "2026-01-17T00:00:00Z", "date_only": false, "value": "2026-01-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "53f36af3-2ca7-42b9-9a0a-6bf8606225d3"}, {"timestamp": "2026-01-18T00:00:00Z", "date_only": false, "value": "2026-01-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "226380ad-e16b-41a6-a5bc-cc97a45959b4"}, {"timestamp": "2026-01-19T00:00:00Z", "date_only": false, "value": "2026-01-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "82d6794d-ed85-42f4-9597-8c2c33ef9347"}, {"timestamp": "2026-01-20T00:00:00Z", "date_only": false, "value": "2026-01-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c8aac6e6-625a-4ce8-aee4-d2bfcf5550b8"}, {"timestamp": "2026-01-20T00:00:00Z", "date_only": false, "value": "2026-01-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a33b5622-ed12-4905-82f9-42c6f82a3f29"}, {"timestamp": "2026-01-21T00:00:00Z", "date_only": false, "value": "2026-01-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ef4100da-0cb2-465d-ad96-ee4517123413"}, {"timestamp": "2026-01-22T00:00:00Z", "date_only": false, "value": "2026-01-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "482bf19b-622b-4d10-9710-7cc320945b8a"}, {"timestamp": "2026-01-23T00:00:00Z", "date_only": false, "value": "2026-01-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "19cc2ef4-c512-4f04-b8bf-eb0c4b13b443"}, {"timestamp": "2026-01-25T00:00:00Z", "date_only": false, "value": "2026-01-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "397046a2-60e6-4df0-9482-01a5b922f541"}, {"timestamp": "2026-01-25T00:33:15Z", "date_only": false, "value": "2026-01-25T00:33:15.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/77274b68-8fd7-43b8-b7d6-df4609389595", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "cac6d14b-790e-4d0e-8ad1-4faf778459f8"}, {"timestamp": "2026-01-26T00:00:00Z", "date_only": false, "value": "2026-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b668c3ba-f3c8-4f1b-b010-1fcd3a1e48bc"}, {"timestamp": "2026-01-28T00:00:00Z", "date_only": false, "value": "2026-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9bd3f77a-a9b5-4816-9f5d-40e3d5adfc63"}, {"timestamp": "2026-01-30T19:19:22Z", "date_only": false, "value": "2026-01-30T19:19:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/aw-junaid/db57913171b70ac795cfa091a75e90ab", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "908b92ee-d1c8-429c-9699-a845224e16e5", "url": "https://gist.github.com/aw-junaid/db57913171b70ac795cfa091a75e90ab"}, {"timestamp": "2026-01-31T00:00:00Z", "date_only": false, "value": "2026-01-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-31)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "df30d28c-e226-4508-9a6b-2f6bd6af716d"}, {"timestamp": "2026-02-02T00:00:00Z", "date_only": false, "value": "2026-02-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9a919fd9-b059-4886-a9b0-39bc4115f3e1"}, {"timestamp": "2026-02-02T12:28:56.273Z", "date_only": false, "value": "2026-02-02T12:28:56.273825Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fab6bc63-43a7-43cd-b173-8cbae2638653", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b861d691-6f2d-4f27-b0d0-2a082b74cd3d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fab6bc63-43a7-43cd-b173-8cbae2638653"}, {"timestamp": "2026-02-02T12:28:56.273Z", "date_only": false, "value": "2026-02-02T12:28:56.273825Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fab6bc63-43a7-43cd-b173-8cbae2638653", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5a33468a-1be1-40c2-861f-aa534f724dd9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fab6bc63-43a7-43cd-b173-8cbae2638653"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-26855", "field": "timestamps.recorded_at", "uuid": "a24818ce-a975-43a1-80b3-1a2e2e4cefaa", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-03T00:00:00Z", "date_only": false, "value": "2026-02-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c91ad311-f61e-4f83-9b42-a5929a932b97"}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": false, "value": "2026-02-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8198bd83-816a-4538-99cb-b9ce74b12ba1"}, {"timestamp": "2026-02-06T00:00:00Z", "date_only": false, "value": "2026-02-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0adac3cb-c43c-42a3-bcb2-230772d9d593"}, {"timestamp": "2026-02-06T21:07:19Z", "date_only": false, "value": "2026-02-06T21:07:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/c8d62b22-305f-4f45-8e36-1b13aeaf27d1", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1bda5074-6030-42a7-af59-39db348002da"}, {"timestamp": "2026-02-08T00:00:00Z", "date_only": false, "value": "2026-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a810436a-110f-4706-b360-90ee39b78462"}, {"timestamp": "2026-02-09T00:00:00Z", "date_only": false, "value": "2026-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3e5094ee-87e1-40fc-8282-9880f9aa3940"}, {"timestamp": "2026-02-11T00:00:00Z", "date_only": false, "value": "2026-02-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2fd01a54-60d1-4f3b-a4f1-6865e9419de7"}, {"timestamp": "2026-02-16T00:00:00Z", "date_only": false, "value": "2026-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3e6281ad-369d-4840-bacf-8c57697c1069"}, {"timestamp": "2026-02-17T00:00:00Z", "date_only": false, "value": "2026-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "20b37f3b-597b-4d42-bbec-f19e6492665d"}, {"timestamp": "2026-02-18T00:00:00Z", "date_only": false, "value": "2026-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8810c87d-ab14-4b5d-aa41-4fad92d12a32"}, {"timestamp": "2026-02-19T00:00:00Z", "date_only": false, "value": "2026-02-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0f99ed75-4286-456f-a206-644e899b359c"}, {"timestamp": "2026-02-20T00:00:00Z", "date_only": false, "value": "2026-02-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6a653911-244e-48b7-a12f-730bb0b906ee"}, {"timestamp": "2026-02-21T00:00:00Z", "date_only": false, "value": "2026-02-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a035f7e9-4067-4a2e-a90f-e2f9e9b70077"}, {"timestamp": "2026-02-22T00:00:00Z", "date_only": false, "value": "2026-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "38f9cbcc-8500-4eef-ac27-f6c71aaa9419"}, {"timestamp": "2026-02-23T00:00:00Z", "date_only": false, "value": "2026-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6a025d30-9526-4991-942d-51307f07907d"}, {"timestamp": "2026-02-24T00:00:00Z", "date_only": false, "value": "2026-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "174979e9-97c7-4b15-9982-37acdf778988"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": false, "value": "2026-02-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "66b739e7-1e87-4429-ab48-881e2a58b287"}, {"timestamp": "2026-02-27T00:00:00Z", "date_only": false, "value": "2026-02-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "04aa03d8-4f1f-4e83-bbf6-8249821c6e3b"}, {"timestamp": "2026-02-28T00:00:00Z", "date_only": false, "value": "2026-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "55d76c4d-e54d-4e7d-8e19-84453773efbd"}, {"timestamp": "2026-03-01T00:00:00Z", "date_only": false, "value": "2026-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "df64d3ca-fad1-4756-a123-792861377e60"}, {"timestamp": "2026-03-03T00:00:00Z", "date_only": false, "value": "2026-03-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "98e92937-2387-4ba8-b33b-d1f8a62a4fc6"}, {"timestamp": "2026-03-04T00:00:00Z", "date_only": false, "value": "2026-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d8be87e2-391b-4ebe-b287-ce64870e529b"}, {"timestamp": "2026-03-05T00:00:00Z", "date_only": false, "value": "2026-03-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "36e14c3a-6198-4915-9be8-1d590e15dd31"}, {"timestamp": "2026-03-06T00:00:00Z", "date_only": false, "value": "2026-03-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b71b6a74-f4bc-41c7-b4b1-4d37f1abee15"}, {"timestamp": "2026-03-07T00:00:00Z", "date_only": false, "value": "2026-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e1a84227-a676-4895-8a07-1d7a56deeb09"}, {"timestamp": "2026-03-08T00:00:00Z", "date_only": false, "value": "2026-03-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c8b664e9-b67d-4d9a-bc3a-51bd38762dc2"}, {"timestamp": "2026-03-09T00:00:00Z", "date_only": false, "value": "2026-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e7d75a38-44b9-49b4-8ebd-6b40fb7fccd5"}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "62543ecb-0f73-4657-b6b8-af04afcbc5af"}, {"timestamp": "2026-03-11T00:00:00Z", "date_only": false, "value": "2026-03-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7d148eca-2657-4df7-9744-2087c05f84b6"}, {"timestamp": "2026-03-14T00:00:00Z", "date_only": false, "value": "2026-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2127dd35-f3dd-47a2-bbe2-b1a1026e3173"}, {"timestamp": "2026-03-16T00:00:00Z", "date_only": false, "value": "2026-03-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8b5a9b67-24e5-4265-b8c9-55d60ff85c68"}, {"timestamp": "2026-03-17T14:55:19.497Z", "date_only": false, "value": "2026-03-17T14:55:19.497209Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=556", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e6d46d29-f0d1-40fa-b7cb-d5b7bed6dfee", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=556"}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b102afcf-3472-4c2e-aef5-3c80a22c48b5"}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4af41243-26d4-4748-a4a2-4a48cd61ea83"}, {"timestamp": "2026-03-21T00:00:00Z", "date_only": false, "value": "2026-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2aa25ce6-1c73-4285-a0ff-1cd9b8941829"}, {"timestamp": "2026-03-21T00:00:00Z", "date_only": false, "value": "2026-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "01fd07d3-7120-4d0b-bbc4-080ff1ec70a1"}, {"timestamp": "2026-03-22T00:00:00Z", "date_only": false, "value": "2026-03-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ad1172f7-eed0-4390-ae55-aaece81b3c2b"}, {"timestamp": "2026-03-22T00:00:00Z", "date_only": false, "value": "2026-03-22T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "06a65eed-b440-4cc8-87c3-2b4d3352eb27"}, {"timestamp": "2026-03-24T00:00:00Z", "date_only": false, "value": "2026-03-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "78f30127-2d33-44f4-9bb3-fc67133f3011"}, {"timestamp": "2026-03-25T00:00:00Z", "date_only": false, "value": "2026-03-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1c7946d8-a85b-4c10-9ca4-2db3b9bcb1de"}, {"timestamp": "2026-03-26T00:00:00Z", "date_only": false, "value": "2026-03-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5826bc50-480e-411f-be3e-44ad7250a592"}, {"timestamp": "2026-03-27T00:00:00Z", "date_only": false, "value": "2026-03-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "520762a9-876c-4cc3-8df4-3f49fdea46db"}, {"timestamp": "2026-03-27T00:00:00Z", "date_only": false, "value": "2026-03-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f3256b5a-3768-48ec-9ace-6412939cf1ee"}, {"timestamp": "2026-03-28T00:00:00Z", "date_only": false, "value": "2026-03-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4c1db0ef-4c77-4cfc-a241-93e7e191ac9c"}, {"timestamp": "2026-03-28T00:00:00Z", "date_only": false, "value": "2026-03-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c2e41187-2eae-4177-ae11-68796dd78c38"}, {"timestamp": "2026-03-29T00:00:00Z", "date_only": false, "value": "2026-03-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "20b867d3-5df1-4397-9a79-904c0725cd2a"}, {"timestamp": "2026-03-30T00:00:00Z", "date_only": false, "value": "2026-03-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "fa0f9adf-f08a-4473-a79d-cce281ac5b19"}, {"timestamp": "2026-03-31T00:00:00Z", "date_only": false, "value": "2026-03-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-31)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f57ce872-5ed8-44e8-bcc0-e53c1ae3f00e"}, {"timestamp": "2026-04-03T00:00:00Z", "date_only": false, "value": "2026-04-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ce2c6de4-2b67-4acd-b60b-63ab4bb84520"}, {"timestamp": "2026-04-05T00:00:00Z", "date_only": false, "value": "2026-04-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "89e4eaf8-8af2-4dcd-9cb9-72cc2930b88b"}, {"timestamp": "2026-04-06T00:00:00Z", "date_only": false, "value": "2026-04-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "717590aa-62e8-4cd4-a1af-edf738e64820"}, {"timestamp": "2026-04-06T00:00:00Z", "date_only": false, "value": "2026-04-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c4735554-ca98-44c5-a280-62fd50686a51"}, {"timestamp": "2026-04-09T00:00:00Z", "date_only": false, "value": "2026-04-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "be16e352-df3b-45ea-aec4-4f8536f58b47"}, {"timestamp": "2026-04-11T00:00:00Z", "date_only": false, "value": "2026-04-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6df06f19-f7b6-44f8-a7e6-fb93838aa3f8"}, {"timestamp": "2026-04-12T00:00:00Z", "date_only": false, "value": "2026-04-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "66a018bc-a0ec-40e1-9753-2ebc2fe04315"}, {"timestamp": "2026-04-12T00:00:00Z", "date_only": false, "value": "2026-04-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d946daa8-5003-43b4-ab77-8e7a941a7238"}, {"timestamp": "2026-04-13T00:00:00Z", "date_only": false, "value": "2026-04-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3461693f-4a8b-415c-ac19-23c77f1a4f3f"}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "75557793-31bc-4510-9952-7e3d794bf55f"}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": false, "value": "2026-04-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "19ca056b-6ca2-41d5-9a08-49afb829f7b5"}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": false, "value": "2026-04-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "daae6d6c-f141-480e-be24-75eb16953aaf"}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": false, "value": "2026-04-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9abb164a-c751-46ee-b43e-9ebab223ae7a"}, {"timestamp": "2026-04-16T00:00:00Z", "date_only": false, "value": "2026-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "202a43ba-7597-4bcc-a8d3-4d2c1fdf5eb1"}, {"timestamp": "2026-04-17T00:00:00Z", "date_only": false, "value": "2026-04-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "51f9dead-2660-4760-8787-a69eb116d0d4"}, {"timestamp": "2026-04-18T00:00:00Z", "date_only": false, "value": "2026-04-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f8700020-3d77-4798-935a-d1c7a4759b77"}, {"timestamp": "2026-04-18T00:00:00Z", "date_only": false, "value": "2026-04-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4ae9ca47-4e67-4755-831b-4ae7584c3008"}, {"timestamp": "2026-04-19T00:00:00Z", "date_only": false, "value": "2026-04-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d851dc35-8a68-432b-8cc8-861998a33a7a"}, {"timestamp": "2026-04-20T00:00:00Z", "date_only": false, "value": "2026-04-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "02deff5a-4efb-44d2-b66f-b7d2c3f54ad5"}, {"timestamp": "2026-04-20T00:00:00Z", "date_only": false, "value": "2026-04-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1cce3575-d6d6-4987-8c79-8109f18a3604"}, {"timestamp": "2026-04-21T00:00:00Z", "date_only": false, "value": "2026-04-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0596d97d-8dce-442c-8ede-0ba51e139867"}, {"timestamp": "2026-04-24T00:00:00Z", "date_only": false, "value": "2026-04-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9a830f01-2872-47dc-b119-1dadcac796be"}, {"timestamp": "2026-04-25T00:00:00Z", "date_only": false, "value": "2026-04-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5c376bef-e2e1-481b-9469-283a7761fdda"}, {"timestamp": "2026-04-26T00:00:00Z", "date_only": false, "value": "2026-04-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2fc54dcd-09ba-45fa-b437-00028efe58c9"}, {"timestamp": "2026-04-27T00:00:00Z", "date_only": false, "value": "2026-04-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "88d31af4-8744-44d6-843e-42a213d46eda"}, {"timestamp": "2026-04-27T17:54:24Z", "date_only": false, "value": "2026-04-27T17:54:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d6af00ee-c1eb-44fd-8cc5-6fb794d5ddd4", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "dbc4b1ed-5829-4b9a-a41d-ad586c3872bd"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "edd124ab-14d2-4fae-bddb-b48553df0f30"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d50539ca-aaf5-4afb-b6c0-17ea85887dbc"}, {"timestamp": "2026-04-29T00:00:00Z", "date_only": false, "value": "2026-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "093736a8-9965-4564-bf3e-7629f810f9a1"}, {"timestamp": "2026-04-29T00:00:00Z", "date_only": false, "value": "2026-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9a8a3b97-6510-4a61-ba92-616d6b37b09d"}, {"timestamp": "2026-05-02T00:00:00Z", "date_only": false, "value": "2026-05-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b6df8ce0-895c-4413-8c25-07ccdd497b6f"}, {"timestamp": "2026-05-05T00:00:00Z", "date_only": false, "value": "2026-05-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c23a1b14-b923-4ad8-8e9e-7341c1a7f447"}, {"timestamp": "2026-05-05T00:00:00Z", "date_only": false, "value": "2026-05-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "bdf1d93a-f40e-4fc1-be18-86930ae73c99"}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": false, "value": "2026-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "17649b90-13d4-422e-bbca-56c082b2a816"}, {"timestamp": "2026-05-08T00:00:00Z", "date_only": false, "value": "2026-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4c536c92-abfd-4682-bf9c-5a281a71036c"}, {"timestamp": "2026-05-09T00:00:00Z", "date_only": false, "value": "2026-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "80039780-c4d4-4c55-bfb2-40dc40225d42"}, {"timestamp": "2026-05-09T00:00:00Z", "date_only": false, "value": "2026-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9286d017-31b7-434d-bb09-6a5137e4f419"}, {"timestamp": "2026-05-10T00:00:00Z", "date_only": false, "value": "2026-05-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "517d15c7-6ffe-4d54-84c3-4249f6d61502"}, {"timestamp": "2026-05-10T00:00:00Z", "date_only": false, "value": "2026-05-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "132bebc2-8122-4981-9863-85addb0c5618"}, {"timestamp": "2026-05-11T00:00:00Z", "date_only": false, "value": "2026-05-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "83b310d8-2778-44ef-a77f-fcaff8c03762"}, {"timestamp": "2026-05-17T00:00:00Z", "date_only": false, "value": "2026-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "35f11a49-f5e1-414d-a020-d72c41838237"}, {"timestamp": "2026-05-17T00:00:00Z", "date_only": false, "value": "2026-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "91e6d9ed-3bf1-4bc3-beae-db6be6236c59"}, {"timestamp": "2026-05-18T00:00:00Z", "date_only": false, "value": "2026-05-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "56815c30-0f23-4d3a-bff9-9f5fc7c6e80a"}, {"timestamp": "2026-05-18T00:00:00Z", "date_only": false, "value": "2026-05-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "febf91b2-bb50-4326-92ce-72d3d5e4c944"}, {"timestamp": "2026-05-19T00:00:00Z", "date_only": false, "value": "2026-05-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1f09ab6a-4b7d-4b71-98c8-af2f2cbb604e"}, {"timestamp": "2026-05-19T00:00:00Z", "date_only": false, "value": "2026-05-19T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "cbe57b46-5b09-4789-b1a5-b307b699528a"}, {"timestamp": "2026-05-20T00:00:00Z", "date_only": false, "value": "2026-05-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e3f94f2c-2701-475b-bd7e-c21d4ec02d75"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "fe3364a2-e16d-4e10-a73e-e1794306c44d"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5b6cf59f-b282-4d80-ae4e-8cc5f7d3d07b"}, {"timestamp": "2026-05-23T00:00:00Z", "date_only": false, "value": "2026-05-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7c76d6cc-005e-4255-a242-fff108b43aee"}, {"timestamp": "2026-05-23T02:00:27Z", "date_only": false, "value": "2026-05-23T02:00:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/dbed03e0-eb16-4f8b-87aa-f080ca118e91", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1a885a5c-b220-4750-b59e-4d0cb33d79ed"}, {"timestamp": "2026-05-24T00:00:00Z", "date_only": false, "value": "2026-05-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "873aed2f-cbfc-40b9-8086-82aa83830d2a"}, {"timestamp": "2026-05-25T00:00:00Z", "date_only": false, "value": "2026-05-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "93a956f2-0491-4c3f-a8ad-5add89f412f6"}, {"timestamp": "2026-05-26T00:00:00Z", "date_only": false, "value": "2026-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d9d30913-3f3c-4391-ad30-308f56301b3f"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": false, "value": "2026-05-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "65da29de-5cba-4531-8174-80437048be6d"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "974f3cc6-df21-49c8-8d9d-54d48db16eb0"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": false, "value": "2026-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d912e3cf-ced7-438b-8714-a383c475de4d"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": false, "value": "2026-05-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "75b50006-4c67-40bc-9eeb-5829bf7bd8b7"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": false, "value": "2026-05-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f65d22b1-c4b4-44f4-a044-d18586fdd6a2"}, {"timestamp": "2026-05-30T00:00:00Z", "date_only": false, "value": "2026-05-30T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "944eb78a-f73c-4409-a783-a7a7b7dfed7b"}, {"timestamp": "2026-05-31T00:00:00Z", "date_only": false, "value": "2026-05-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-31)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1b663174-1c71-4f35-87e8-2f1aeec86d05"}, {"timestamp": "2026-06-01T00:00:00Z", "date_only": false, "value": "2026-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f9d0c234-8542-45bd-b3df-79deec6c07ea"}, {"timestamp": "2026-06-02T00:00:00Z", "date_only": false, "value": "2026-06-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9bd067ff-7a74-4629-b370-23e669bfb53b"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d0e349af-6f0e-42ff-aa1b-5af5de2d2928"}, {"timestamp": "2026-06-04T22:04:33Z", "date_only": false, "value": "2026-06-04T22:04:33.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/1cc4d8d4-4592-4dae-bcdf-2fb9d38b794c", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0a8cd158-1709-41d0-a48a-e90de0dd4856"}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": false, "value": "2026-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "52cd9fe8-3e17-4509-a93b-de520ff10cf7"}, {"timestamp": "2026-06-06T00:00:00Z", "date_only": false, "value": "2026-06-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "49e5db19-b79e-4eb2-8455-bc42f8ea91ad"}, {"timestamp": "2026-06-08T00:00:00Z", "date_only": false, "value": "2026-06-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ffa3b73f-ec3d-4668-9e35-51fce6484a0f"}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1b25b25c-a0f7-4660-a8f0-0b6a3178f2ed"}, {"timestamp": "2026-06-11T00:00:00Z", "date_only": false, "value": "2026-06-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7a46b0f2-aff8-4f7a-8d7d-36d2ac5ed4fc"}, {"timestamp": "2026-06-14T00:00:00Z", "date_only": false, "value": "2026-06-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3690cd54-03fd-4b66-8e98-27b78861b1a7"}, {"timestamp": "2026-06-16T00:00:00Z", "date_only": false, "value": "2026-06-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8df42cf3-0add-4a66-8847-f2299879598c"}, {"timestamp": "2026-06-17T00:00:00Z", "date_only": false, "value": "2026-06-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "63931d83-33c3-49e3-bfe3-ed3fa3c55615"}, {"timestamp": "2026-06-19T00:00:00Z", "date_only": false, "value": "2026-06-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6d8e91ad-61be-4aa1-abb9-9dd98ee546ab"}, {"timestamp": "2026-06-19T12:48:00.234Z", "date_only": false, "value": "2026-06-19T12:48:00.234273Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/58423ddb-dd76-4d87-aa44-398f9f4378c3", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "331b6a69-e2ec-4739-9701-3399da8c2666", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/58423ddb-dd76-4d87-aa44-398f9f4378c3"}, {"timestamp": "2026-06-20T00:00:00Z", "date_only": false, "value": "2026-06-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "fa4458ed-6bd6-49e9-adbc-5c969b2d96b5"}, {"timestamp": "2026-06-22T00:00:00Z", "date_only": false, "value": "2026-06-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "47ef621e-90f6-4794-baaa-3970484480bf"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-26855", "field": "timestamps.recorded_at", "uuid": "689a1567-2b26-4e7f-9bf7-77e3a951a6c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:12.557Z", "date_only": false, "value": "2026-06-23T11:13:12.557099Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/689a1567-2b26-4e7f-9bf7-77e3a951a6c7", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "88a9b299-6ba7-439d-ad51-c1ab8161d14d", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/689a1567-2b26-4e7f-9bf7-77e3a951a6c7"}, {"timestamp": "2026-06-23T14:04:34.245Z", "date_only": false, "value": "2026-06-23T14:04:34.245875Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/50e8002b-dde3-4fbe-8fe6-8c20207c51d5", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "63102e23-6fb6-4ea7-9015-e1215726493d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/50e8002b-dde3-4fbe-8fe6-8c20207c51d5"}, {"timestamp": "2026-06-25T06:34:31.532Z", "date_only": false, "value": "2026-06-25T06:34:31.532137Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-998693a6-0c9cca46b62121bd", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "fc543205-87f1-423b-a6e3-5544263486c6", "url": "https://poliverso.org/objects/0477a01e-998693a6-0c9cca46b62121bd"}, {"timestamp": "2026-06-25T10:15:27.282Z", "date_only": false, "value": "2026-06-25T10:15:27.282296Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "99207a0e-bee2-4a2e-be7e-02c2dda1a43f"}, {"timestamp": "2026-06-26T10:15:14.249Z", "date_only": false, "value": "2026-06-26T10:15:14.249494Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "994040a4-644e-49de-8926-0ff5eba1305b"}, {"timestamp": "2026-06-28T10:00:07.085Z", "date_only": false, "value": "2026-06-28T10:00:07.085983Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "fedc90d3-8d1f-428f-8a59-3eaab77dd297"}, {"timestamp": "2026-06-28T10:15:06.185Z", "date_only": false, "value": "2026-06-28T10:15:06.185030Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "dd812dc0-1ddc-41f4-ab22-bee0ddf390c2"}, {"timestamp": "2026-06-29T10:00:05.637Z", "date_only": false, "value": "2026-06-29T10:00:05.637548Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "555ad682-0622-4018-8456-6a04be864c96"}, {"timestamp": "2026-06-29T10:15:06.394Z", "date_only": false, "value": "2026-06-29T10:15:06.394068Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9d95a93a-440f-4cf1-9450-6169daeacd8c"}, {"timestamp": "2026-06-30T09:22:36.821Z", "date_only": false, "value": "2026-06-30T09:22:36.821533Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/baf44e82-de07-4749-ae2b-3b12bf7c1f92", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "320f4d2a-080e-4e7d-ba09-37ff9ee6fb01", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/baf44e82-de07-4749-ae2b-3b12bf7c1f92"}, {"timestamp": "2026-06-30T10:00:05.885Z", "date_only": false, "value": "2026-06-30T10:00:05.885805Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "edfce373-a918-47ff-ab33-ef476240c6fa"}, {"timestamp": "2026-06-30T10:15:09.813Z", "date_only": false, "value": "2026-06-30T10:15:09.813776Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e858ef22-9d05-490d-9447-87fe095a8739"}, {"timestamp": "2026-07-01T05:53:52.803Z", "date_only": false, "value": "2026-07-01T05:53:52.803103Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/246a4b42-70d9-4f6b-ae8b-12ee124156cc", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "35e04871-62b6-4400-8662-7b8fbaf9f3c0", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/246a4b42-70d9-4f6b-ae8b-12ee124156cc"}, {"timestamp": "2026-07-01T10:15:07.542Z", "date_only": false, "value": "2026-07-01T10:15:07.542031Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3e5c4d8f-d51b-4e50-81cb-0613d3637bd0"}, {"timestamp": "2026-07-02T10:00:09.320Z", "date_only": false, "value": "2026-07-02T10:00:09.320247Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8c245ff4-998e-4fa6-969b-2055eda1c49b"}, {"timestamp": "2026-07-03T10:15:06.812Z", "date_only": false, "value": "2026-07-03T10:15:06.812896Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0e4bab44-6bee-49d0-b6cc-3e3e809fd5e8"}, {"timestamp": "2026-07-04T10:00:06.632Z", "date_only": false, "value": "2026-07-04T10:00:06.632783Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f02faba3-b8a1-4aad-9d95-9cc99dff68af"}, {"timestamp": "2026-07-04T10:15:08.382Z", "date_only": false, "value": "2026-07-04T10:15:08.382558Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f6f0023b-97cc-4df9-bed5-eee74c440516"}, {"timestamp": "2026-07-05T10:15:26.308Z", "date_only": false, "value": "2026-07-05T10:15:26.308469Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c2e8e7e7-60bf-483b-ac3b-b4b50e2ddfcc"}, {"timestamp": "2026-07-06T10:15:16.449Z", "date_only": false, "value": "2026-07-06T10:15:16.449645Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e931197d-5a0e-4a0b-a35b-3da1b476e6c6"}, {"timestamp": "2026-07-07T10:15:10.657Z", "date_only": false, "value": "2026-07-07T10:15:10.657893Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4ce1c855-4ca1-4ff5-9c97-bbfcc3b53fbb"}, {"timestamp": "2026-07-08T00:15:01.948Z", "date_only": false, "value": "2026-07-08T00:15:01.948960Z", "kind": "sighting", "label": "Seen", "source": "MISP/386236f1-29ba-47df-b4e6-e0fe458cd285", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "243c8cdb-b142-4af0-ae3c-b39345387f4d"}, {"timestamp": "2026-07-08T10:15:06.138Z", "date_only": false, "value": "2026-07-08T10:15:06.138962Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3104f357-9e66-4883-88e0-fea2ee9ba5f4"}, {"timestamp": "2026-07-09T00:15:02.894Z", "date_only": false, "value": "2026-07-09T00:15:02.894821Z", "kind": "sighting", "label": "Seen", "source": "MISP/386236f1-29ba-47df-b4e6-e0fe458cd285", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e1cbe4af-a097-4b74-bf05-b11215b47c55"}, {"timestamp": "2026-07-09T10:15:09.904Z", "date_only": false, "value": "2026-07-09T10:15:09.904127Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "785ae6d5-8edf-4e82-b91d-5d965ef336b2"}, {"timestamp": "2026-07-10T10:00:09.762Z", "date_only": false, "value": "2026-07-10T10:00:09.762183Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7702789d-9560-4780-97a0-3fe45681680b"}, {"timestamp": "2026-07-10T10:15:06.046Z", "date_only": false, "value": "2026-07-10T10:15:06.046649Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f172b40a-ac47-4b00-afb2-dd8c10036101"}, {"timestamp": "2026-07-11T10:15:11.834Z", "date_only": false, "value": "2026-07-11T10:15:11.834942Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1c55c306-a83a-44e8-ac18-748303fbda8e"}, {"timestamp": "2026-07-12T10:15:06.149Z", "date_only": false, "value": "2026-07-12T10:15:06.149678Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "cf9fff0c-7cd5-4c96-a10c-a293fb60c402"}, {"timestamp": "2026-07-13T14:00:05.609Z", "date_only": false, "value": "2026-07-13T14:00:05.609575Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8356", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0b11e7a1-b292-47f3-bf35-562930707418", "url": "https://t.me/true_secator/8356"}, {"timestamp": "2026-07-14T00:00:45.806Z", "date_only": false, "value": "2026-07-14T00:00:45.806349Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8356", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "41825f0a-b242-40fc-8342-3a9adfc2c3e9", "url": "https://t.me/true_secator/8356"}, {"timestamp": "2026-07-14T10:15:11.213Z", "date_only": false, "value": "2026-07-14T10:15:11.213920Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "69634c27-e6ed-44f9-bdcd-e3854c25306b"}, {"timestamp": "2026-07-15T10:00:15.866Z", "date_only": false, "value": "2026-07-15T10:00:15.866390Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0e3d92e1-c924-4767-b827-3a6fcfb39e97"}, {"timestamp": "2026-07-15T10:15:05.744Z", "date_only": false, "value": "2026-07-15T10:15:05.744933Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "804b1c70-26dc-4db5-a3d8-02e0aa87514a"}, {"timestamp": "2026-07-16T10:15:06.413Z", "date_only": false, "value": "2026-07-16T10:15:06.413588Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "19253806-1a3c-408c-aac5-b5cd1a2526f7"}, {"timestamp": "2026-07-16T14:00:04.550Z", "date_only": false, "value": "2026-07-16T14:00:04.550164Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Unidentified_TM/1079", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "593a9364-e373-4433-9dd9-616b92cee1bd", "url": "https://t.me/Unidentified_TM/1079"}, {"timestamp": "2026-07-17T00:00:52.648Z", "date_only": false, "value": "2026-07-17T00:00:52.648091Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Unidentified_TM/1079", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "287757d6-de1b-4f7c-a9fd-c96a9b1a4853", "url": "https://t.me/Unidentified_TM/1079"}, {"timestamp": "2026-07-17T05:00:05.592Z", "date_only": false, "value": "2026-07-17T05:00:05.592393Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/232", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f7f00778-4a8d-4c7e-8528-63f030354182", "url": "https://t.me/EchelonEyes/232"}, {"timestamp": "2026-07-17T12:00:05.578Z", "date_only": false, "value": "2026-07-17T12:00:05.578728Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/6451", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9e5f51db-99a1-4ec0-b102-23fa7ada401d", "url": "https://t.me/S_E_Reborn/6451"}, {"timestamp": "2026-07-18T00:00:31.956Z", "date_only": false, "value": "2026-07-18T00:00:31.956383Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/6451", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "0eecb3ba-e82e-4ae1-a90b-beb1555fa861", "url": "https://t.me/S_E_Reborn/6451"}, {"timestamp": "2026-07-18T00:00:37.899Z", "date_only": false, "value": "2026-07-18T00:00:37.899201Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/232", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ee76f8fc-b3e1-4b98-9e2e-52b3670f689d", "url": "https://t.me/EchelonEyes/232"}, {"timestamp": "2026-07-18T10:15:07.666Z", "date_only": false, "value": "2026-07-18T10:15:07.666276Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d40325b8-fcfb-4dcc-b216-bfc57d903eb7"}, {"timestamp": "2026-07-19T10:00:05.011Z", "date_only": false, "value": "2026-07-19T10:00:05.011315Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2563f6f4-5047-4831-b8c9-8b1625402faf"}, {"timestamp": "2026-07-19T10:15:09.415Z", "date_only": false, "value": "2026-07-19T10:15:09.415676Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "efa64cd2-4a42-4d72-beaf-30cd9b5e2849"}, {"timestamp": "2026-07-21T10:16:12.473Z", "date_only": false, "value": "2026-07-21T10:16:12.473880Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "eda5494b-7321-46cd-bc0a-57c81f5be396"}, {"timestamp": "2026-07-22T00:15:02.755Z", "date_only": false, "value": "2026-07-22T00:15:02.755981Z", "kind": "sighting", "label": "Seen", "source": "MISP/386236f1-29ba-47df-b4e6-e0fe458cd285", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "07b0fa29-76eb-41e8-b391-02eed25d41f0"}, {"timestamp": "2026-07-23T00:15:02.457Z", "date_only": false, "value": "2026-07-23T00:15:02.457234Z", "kind": "sighting", "label": "Seen", "source": "MISP/386236f1-29ba-47df-b4e6-e0fe458cd285", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a5b84d43-109b-46b2-9658-34e8440c7e9f"}, {"timestamp": "2026-07-23T10:15:08.189Z", "date_only": false, "value": "2026-07-23T10:15:08.189806Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-22)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a2b3e660-de8b-46d5-8a37-ae66ebce889d"}, {"timestamp": "2026-07-23T21:15:03.571Z", "date_only": false, "value": "2026-07-23T21:15:03.571074Z", "kind": "sighting", "label": "Seen", "source": "MISP/cec219ff-8f6d-45c9-bdbb-b4fb8c9c0f2b", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "571bf73e-1e7e-4c01-b651-2c794f5c05d1"}, {"timestamp": "2026-07-24T00:15:03.661Z", "date_only": false, "value": "2026-07-24T00:15:03.661466Z", "kind": "sighting", "label": "Seen", "source": "MISP/cec219ff-8f6d-45c9-bdbb-b4fb8c9c0f2b", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "05848e49-8b1e-498f-ba7f-b231b7000ae6"}, {"timestamp": "2026-07-25T03:00:04.053Z", "date_only": false, "value": "2026-07-25T03:00:04.053163Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bin_z0ne/388", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "27e3ea0c-c45a-4492-b83c-b0add260bba4", "url": "https://t.me/bin_z0ne/388"}, {"timestamp": "2026-07-25T10:15:13.441Z", "date_only": false, "value": "2026-07-25T10:15:13.441853Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6db706ad-9c44-4c5c-a79e-b9a31e878889"}, {"timestamp": "2026-07-26T00:00:46.867Z", "date_only": false, "value": "2026-07-26T00:00:46.867251Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/bin_z0ne/388", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c8208409-fdc3-464e-a9cf-129f411ec892", "url": "https://t.me/bin_z0ne/388"}, {"timestamp": "2026-07-26T10:00:07.226Z", "date_only": false, "value": "2026-07-26T10:00:07.226172Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5e6f7890-17d8-40c9-aa19-07b1b8f51985"}, {"timestamp": "2026-07-26T10:15:37.467Z", "date_only": false, "value": "2026-07-26T10:15:37.467922Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5d20410e-78cb-4b2a-b2ab-d93af39a0862"}, {"timestamp": "2026-07-28T10:00:05.323Z", "date_only": false, "value": "2026-07-28T10:00:05.323759Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3fc7d27e-c10a-4fe4-9d9b-ae6643512817"}, {"timestamp": "2026-07-28T10:15:22.328Z", "date_only": false, "value": "2026-07-28T10:15:22.328299Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "34f9b131-3a41-45ae-a769-1619b3aba25a"}, {"timestamp": "2026-07-29T12:03:22.526Z", "date_only": false, "value": "2026-07-29T12:03:22.526017Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/564", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f9168886-0676-4eae-a72b-d66f4d668db0", "url": "https://t.me/sysadm_in_up/564"}, {"timestamp": "2026-07-30T00:03:08.109Z", "date_only": false, "value": "2026-07-30T00:03:08.109924Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysadm_in_up/564", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8bb31831-6e0f-4cb5-8149-3e32c34854c1", "url": "https://t.me/sysadm_in_up/564"}, {"timestamp": "2026-07-31T03:00:03.430Z", "date_only": false, "value": "2026-07-31T03:00:03.430496Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/95932", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7529f50a-21dd-445c-b7da-00d2706332fa", "url": "https://t.me/GithubRedTeam/95932"}, {"timestamp": "2026-07-31T10:15:10.875Z", "date_only": false, "value": "2026-07-31T10:15:10.875943Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8e06fef9-4df9-43b9-9203-1452ba493448"}, {"timestamp": "2026-08-01T00:00:42.982Z", "date_only": false, "value": "2026-08-01T00:00:42.982203Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/GithubRedTeam/95932", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "44e86040-a5f7-45e6-90db-1ec5eb92a69d", "url": "https://t.me/GithubRedTeam/95932"}, {"timestamp": "2026-08-01T10:00:07.139Z", "date_only": false, "value": "2026-08-01T10:00:07.139627Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-31)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e5b5ee80-7ee8-4335-a5aa-d85663f0c404"}, {"timestamp": "2026-08-02T10:28:41.077Z", "date_only": false, "value": "2026-08-02T10:28:41.077281Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7fd9832c-ec7b-43da-a60a-61c9c2b40686"}, {"timestamp": "2026-08-02T10:34:36.918Z", "date_only": false, "value": "2026-08-02T10:34:36.918508Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e58fd1d2-67bb-429f-bd66-5955b6b50759"}, {"timestamp": "2026-08-03T10:51:10.647Z", "date_only": false, "value": "2026-08-03T10:51:10.647854Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "47adb8be-bec3-40b3-998c-62c731ddb5f1"}, {"timestamp": "2026-08-04T05:00:04.341Z", "date_only": false, "value": "2026-08-04T05:00:04.341059Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sysadm_in_up/564", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "aed3077e-6a0a-428f-8458-9cae483c68c0", "url": "https://t.me/sysadm_in_up/564"}, {"timestamp": "2026-08-04T12:15:04.458Z", "date_only": false, "value": "2026-08-04T12:15:04.458460Z", "kind": "sighting", "label": "Seen", "source": "MISP/cfdb2abf-6c64-4005-9614-a35e97f306a7", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6078a793-f569-4577-9565-834b6c2e9c7d"}, {"timestamp": "2026-08-04T13:00:24.129Z", "date_only": false, "value": "2026-08-04T13:00:24.129673Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/wh_lab/59", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "266a0ede-9ace-4977-bc8e-f3843b66f9c8", "url": "https://t.me/wh_lab/59"}, {"timestamp": "2026-08-05T00:00:40.387Z", "date_only": false, "value": "2026-08-05T00:00:40.387153Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/wh_lab/59", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d3e362a5-bd53-4ac7-984e-ab9ab31c2eca", "url": "https://t.me/wh_lab/59"}, {"timestamp": "2026-08-05T00:00:55.133Z", "date_only": false, "value": "2026-08-05T00:00:55.133188Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/sysadm_in_up/564", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "49a03a39-f4a1-4603-8cba-e4aa79ee451a", "url": "https://t.me/sysadm_in_up/564"}, {"timestamp": "2026-08-05T00:15:02.804Z", "date_only": false, "value": "2026-08-05T00:15:02.804834Z", "kind": "sighting", "label": "Seen", "source": "MISP/cfdb2abf-6c64-4005-9614-a35e97f306a7", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f9999109-17dc-4c66-9ed0-ec3a9016a135"}, {"timestamp": "2026-08-05T10:00:07.155Z", "date_only": false, "value": "2026-08-05T10:00:07.155818Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6a1b55d2-1b17-4370-868f-9cadefbe27ec"}, {"timestamp": "2026-08-05T10:15:10.743Z", "date_only": false, "value": "2026-08-05T10:15:10.743258Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b5e6531a-f76a-49de-aa61-2361a125e79a"}, {"timestamp": "2026-08-06T00:00:43.343Z", "date_only": false, "value": "2026-08-06T00:00:43.343319Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/wh_lab/59", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "fcb63a44-985d-4c42-b0f5-b8409a4557f8", "url": "https://t.me/wh_lab/59"}, {"timestamp": "2026-08-06T10:15:07.049Z", "date_only": false, "value": "2026-08-06T10:15:07.049029Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9c95ff61-a94b-4afe-8257-541583eac422"}, {"timestamp": "2026-08-08T11:00:52.860Z", "date_only": false, "value": "2026-08-08T11:00:52.860490Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "502e555c-dee4-4aee-b06d-6a2d7d64b91a"}, {"timestamp": "2026-08-09T10:48:36.494Z", "date_only": false, "value": "2026-08-09T10:48:36.494674Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "cf86b8d9-32bc-4b25-978b-3787656d8ae3"}, {"timestamp": "2026-08-11T10:15:12.336Z", "date_only": false, "value": "2026-08-11T10:15:12.336695Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8f43f506-4eca-4736-90d5-7d0bf1876f25"}, {"timestamp": "2026-08-12T03:55:35.061Z", "date_only": false, "value": "2026-08-12T03:55:35.061Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2021-26855", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-12T10:00:07.752Z", "date_only": false, "value": "2026-08-12T10:00:07.752904Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "cfe63fd0-c23c-4da5-a060-a389006c71bd"}, {"timestamp": "2026-08-12T10:15:11.816Z", "date_only": false, "value": "2026-08-12T10:15:11.816162Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7b47b9bd-3cac-40bd-8e33-3b7de55be8a8"}, {"timestamp": "2026-08-12T20:08:51.578Z", "date_only": false, "value": "2026-08-12T20:08:51.578078Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msvwnyoxbk2y", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d8d4f62a-9edb-42e3-b565-ca00f00c27cc", "url": "https://bsky.app/profile/vulnsea.com/post/3msvwnyoxbk2y"}, {"timestamp": "2026-08-13T10:15:16.626Z", "date_only": false, "value": "2026-08-13T10:15:16.626002Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "25066ecf-6e3d-4afb-8313-fe39cd3efb19"}, {"timestamp": "2026-08-14T10:00:11.441Z", "date_only": false, "value": "2026-08-14T10:00:11.441017Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "385c4d79-0a07-4983-852d-f7b36cb6a8eb"}, {"timestamp": "2026-08-14T10:15:07.290Z", "date_only": false, "value": "2026-08-14T10:15:07.290084Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "741b70de-abb9-47bf-a1cd-dec8c340abc3"}, {"timestamp": "2026-08-15T08:00:10.080Z", "date_only": false, "value": "2026-08-15T08:00:10.080538Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/aktivcons/776", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "78a3e96e-04b4-4eda-898f-6ebfb61b8141", "url": "https://t.me/aktivcons/776"}, {"timestamp": "2026-08-15T08:00:11.234Z", "date_only": false, "value": "2026-08-15T08:00:11.234982Z", "kind": "sighting", "label": "Seen", "source": "Telegram/oJ6R1jM7fPkk_BZgoS0thY3kb12J2aSTnZXO0B4M5ETKe-k", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ba2c1a75-369d-46d0-9366-28dc402396f8"}, {"timestamp": "2026-08-15T08:00:11.965Z", "date_only": false, "value": "2026-08-15T08:00:11.965982Z", "kind": "sighting", "label": "Seen", "source": "Telegram/DyCL9FeHC8FNy5L8yK-Aof_iMsgHlz1kO6xar1BJT7iRzw", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "cc4ee675-9c2f-4c77-b94c-a41a04043af8"}, {"timestamp": "2026-08-15T10:15:06.462Z", "date_only": false, "value": "2026-08-15T10:15:06.462055Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-14)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5edbdade-9c8a-4af1-b772-2d7128a055d5"}, {"timestamp": "2026-08-16T00:00:11.186Z", "date_only": false, "value": "2026-08-16T00:00:11.186290Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/DyCL9FeHC8FNy5L8yK-Aof_iMsgHlz1kO6xar1BJT7iRzw", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "966700c1-d5f0-4396-850a-5ad795e697f3"}, {"timestamp": "2026-08-16T00:00:14.086Z", "date_only": false, "value": "2026-08-16T00:00:14.086712Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/aktivcons/776", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c1fe0c99-b9a9-4ea8-af32-60970f0e177c", "url": "https://t.me/aktivcons/776"}, {"timestamp": "2026-08-16T10:15:06.141Z", "date_only": false, "value": "2026-08-16T10:15:06.141253Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4bbb8dcc-2363-40d8-8214-987be14e190e"}, {"timestamp": "2026-08-17T10:15:06.753Z", "date_only": false, "value": "2026-08-17T10:15:06.753070Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "b90eb503-04da-41ba-a314-0109defa0956"}, {"timestamp": "2026-08-18T10:15:08.154Z", "date_only": false, "value": "2026-08-18T10:15:08.154094Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8cbda65d-b2e9-41cc-89b2-cde7f287261a"}, {"timestamp": "2026-08-19T07:00:03.760Z", "date_only": false, "value": "2026-08-19T07:00:03.760407Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/i_odmin/1394", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "98b9913b-d61d-4093-b011-97f938da7708", "url": "https://t.me/i_odmin/1394"}, {"timestamp": "2026-08-19T10:00:11.022Z", "date_only": false, "value": "2026-08-19T10:00:11.022322Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1c890725-f3a0-4ce8-a3a0-3910b76e8ba7"}, {"timestamp": "2026-08-19T10:15:15.873Z", "date_only": false, "value": "2026-08-19T10:15:15.873392Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3c10a876-e50f-4b6c-9b7c-ce73fc653402"}, {"timestamp": "2026-08-19T16:30:15.282Z", "date_only": false, "value": "2026-08-19T16:30:15.282Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-26855", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-19T16:30:15.282Z", "date_only": false, "value": "2026-08-19T16:30:15.282Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2021-26855", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-19T18:31:27Z", "date_only": false, "value": "2026-08-19T18:31:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6784-2MH5-CQ56", "record": "GHSA-6784-2MH5-CQ56", "field": "modified"}, {"timestamp": "2026-08-19T19:22:24.100Z", "date_only": false, "value": "2026-08-19T19:22:24.100", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-26855", "record": "FKIE_CVE-2021-26855", "field": "lastModified"}, {"timestamp": "2026-08-20T00:00:28.478Z", "date_only": false, "value": "2026-08-20T00:00:28.478900Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/i_odmin/1394", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6751dfc8-bfc0-4b4e-8b13-da236a0887e8", "url": "https://t.me/i_odmin/1394"}, {"timestamp": "2026-08-21T10:15:07.738Z", "date_only": false, "value": "2026-08-21T10:15:07.738533Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3b718248-726f-4b17-b037-9ad2c2fbe9e0"}, {"timestamp": "2026-08-22T10:00:14.941Z", "date_only": false, "value": "2026-08-22T10:00:14.941499Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "71936109-8a52-48b1-b96d-559d1e68a330"}, {"timestamp": "2026-08-22T10:15:05.718Z", "date_only": false, "value": "2026-08-22T10:15:05.718898Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c3047ed5-d998-48fc-975d-337ed1bc5384"}, {"timestamp": "2026-08-25T10:15:07.066Z", "date_only": false, "value": "2026-08-25T10:15:07.066784Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9c10056c-e1bb-491c-95e3-38f82dfd1381"}, {"timestamp": "2026-08-25T16:15:28.654Z", "date_only": false, "value": "2026-08-25T16:15:28.654968Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/bbrk364/668a69812b0cfe4bac2f698ddef34079", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "610a6e73-fbc3-46f4-bbbc-66e5ec65f409", "url": "https://gist.github.com/bbrk364/668a69812b0cfe4bac2f698ddef34079"}, {"timestamp": "2026-08-26T10:15:26.082Z", "date_only": false, "value": "2026-08-26T10:15:26.082234Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "419c7eb3-90c9-4c83-9eb6-b39bbc7e0c35"}, {"timestamp": "2026-08-27T10:15:09.424Z", "date_only": false, "value": "2026-08-27T10:15:09.424116Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-26)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "91fd89f2-e304-489e-aefd-4a3a97a2617c"}, {"timestamp": "2026-08-28T10:00:07.682Z", "date_only": false, "value": "2026-08-28T10:00:07.682366Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "80675f60-4cb3-4773-82ba-b2027218a06d"}, {"timestamp": "2026-08-28T10:15:46.302Z", "date_only": false, "value": "2026-08-28T10:15:46.302423Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-27)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "228b0802-ca5f-4e0c-bb5f-37d00762cd38"}, {"timestamp": "2026-08-29T10:15:17.085Z", "date_only": false, "value": "2026-08-29T10:15:17.085411Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9cf76796-23eb-4d2d-9357-cf83c2e0280b"}, {"timestamp": "2026-08-30T10:00:05.279Z", "date_only": false, "value": "2026-08-30T10:00:05.279166Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8bbdda7c-1f06-4d3b-b26f-e1d1b3949e81"}, {"timestamp": "2026-08-30T10:15:07.916Z", "date_only": false, "value": "2026-08-30T10:15:07.916322Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-29)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3af5e189-893a-4b39-9cdd-dd19849fcd42"}, {"timestamp": "2026-08-31T10:15:13.581Z", "date_only": false, "value": "2026-08-31T10:15:13.581458Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-30)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "31a7e6e9-c0e1-4457-87e4-73114dfee147"}, {"timestamp": "2026-09-01T17:00:16.770Z", "date_only": false, "value": "2026-09-01T17:00:16.770353Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7266", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2d8c5f32-8629-4aec-8ddb-1820ccabe4ec", "url": "https://t.me/cissp/7266"}, {"timestamp": "2026-09-01T17:00:32.769Z", "date_only": false, "value": "2026-09-01T17:00:32.769533Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/5363", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c7bafd80-4d01-43e5-9505-727ceb6591ad", "url": "https://t.me/cissp/5363"}, {"timestamp": "2026-09-01T17:00:33.069Z", "date_only": false, "value": "2026-09-01T17:00:33.069373Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/5362", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8c1e70aa-7eee-4816-9353-4ff614f5a87a", "url": "https://t.me/cissp/5362"}, {"timestamp": "2026-09-01T17:00:58.381Z", "date_only": false, "value": "2026-09-01T17:00:58.381731Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/2548", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "acbc0e3a-acef-4d61-9787-f9c7fb2e3af1", "url": "https://t.me/cissp/2548"}, {"timestamp": "2026-09-01T17:01:00.773Z", "date_only": false, "value": "2026-09-01T17:01:00.773082Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/2450", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4818a8aa-0a91-4537-b4e9-05f74a2e0b18", "url": "https://t.me/cissp/2450"}, {"timestamp": "2026-09-01T18:00:04.883Z", "date_only": false, "value": "2026-09-01T18:00:04.883571Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hackersmeet0/2539", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "2110c52d-6e37-47ed-91c3-ce56313cf288", "url": "https://t.me/hackersmeet0/2539"}, {"timestamp": "2026-09-01T20:02:26.033Z", "date_only": false, "value": "2026-09-01T20:02:26.033174Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/22094", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8ce3f9ca-63f7-4089-81be-e86566452382", "url": "https://t.me/hacking_Attack/22094"}, {"timestamp": "2026-09-01T20:02:43.944Z", "date_only": false, "value": "2026-09-01T20:02:43.944723Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/8141", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "e4a0595f-78fd-4ca3-a4de-d59fa5a5801e", "url": "https://t.me/hacking_Attack/8141"}, {"timestamp": "2026-09-01T20:02:50.948Z", "date_only": false, "value": "2026-09-01T20:02:50.948140Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/362", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "893b562e-52f9-4c9f-b5ea-c80d585b59b3", "url": "https://t.me/hacking_Attack/362"}, {"timestamp": "2026-09-02T01:00:08.155Z", "date_only": false, "value": "2026-09-02T01:00:08.155358Z", "kind": "sighting", "label": "Seen", "source": "Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjR_Jh6A", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ae619ce5-77b8-4fea-92f0-314868b1a5ea"}, {"timestamp": "2026-09-02T05:00:04.173Z", "date_only": false, "value": "2026-09-02T05:00:04.173312Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FxPwD2QYmiA5ZVhY8rKhgPR6q1a7u8sU2ARM9Vm3CjRJJs0", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "13c51924-8c51-460f-8ebe-13254e80a00b"}, {"timestamp": "2026-09-02T10:15:08.507Z", "date_only": false, "value": "2026-09-02T10:15:08.507138Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "03b3ca97-6ab9-4332-b050-dd8205bc5cda"}, {"timestamp": "2026-09-03T00:00:44.074Z", "date_only": false, "value": "2026-09-03T00:00:44.074899Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FxPwD2QYmiA5ZVhY8rKhgPR6q1a7u8sU2ARM9Vm3CjRJJs0", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "54988491-456f-4db8-ac96-49bc5149f46f"}, {"timestamp": "2026-09-03T00:00:56.824Z", "date_only": false, "value": "2026-09-03T00:00:56.824471Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjR_Jh6A", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "848535e4-0a82-4080-8a25-aeb2f9179550"}, {"timestamp": "2026-09-03T10:15:14.931Z", "date_only": false, "value": "2026-09-03T10:15:14.931285Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-02)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "bb149c94-b9ad-4618-a28a-d376f0f1e01c"}, {"timestamp": "2026-09-04T10:00:09.191Z", "date_only": false, "value": "2026-09-04T10:00:09.191346Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-03)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d6537872-8cbc-4690-98dd-dcf8baa71aa1"}, {"timestamp": "2026-09-05T10:15:30.141Z", "date_only": false, "value": "2026-09-05T10:15:30.141470Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-04)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1c71faac-41c1-4180-8a7d-80af222cc103"}, {"timestamp": "2026-09-06T10:15:08.204Z", "date_only": false, "value": "2026-09-06T10:15:08.204349Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "644a711a-237d-4647-aa4e-836eae915965"}, {"timestamp": "2026-09-07T10:15:05.191Z", "date_only": false, "value": "2026-09-07T10:15:05.191217Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-06)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a67335d7-19fe-4ae7-bd2d-efa111f80fe3"}, {"timestamp": "2026-09-07T18:00:05.194Z", "date_only": false, "value": "2026-09-07T18:00:05.194902Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/22094", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "16f958be-92db-4ee3-a131-bb88e879e51f", "url": "https://t.me/hacking_Attack/22094"}, {"timestamp": "2026-09-08T07:00:04.748Z", "date_only": false, "value": "2026-09-08T07:00:04.748347Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/8141", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8bedd1e8-d811-4bf0-8851-8a0534518069", "url": "https://t.me/hacking_Attack/8141"}, {"timestamp": "2026-09-08T10:00:07.661Z", "date_only": false, "value": "2026-09-08T10:00:07.661166Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "1cbb058d-3917-48e6-a8b0-e092539b67bc"}, {"timestamp": "2026-09-08T10:15:14.486Z", "date_only": false, "value": "2026-09-08T10:15:14.486225Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-07)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "cb55449a-f087-405c-bfa6-18b00c822933"}, {"timestamp": "2026-09-09T10:00:09.798Z", "date_only": false, "value": "2026-09-09T10:00:09.798831Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-08)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5e1d6271-11d9-4dce-8c9e-d466955f1550"}, {"timestamp": "2026-09-10T10:00:13.775Z", "date_only": false, "value": "2026-09-10T10:00:13.775517Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "12adbd68-d414-44c9-a490-8494ac979ef1"}, {"timestamp": "2026-09-10T10:15:11.441Z", "date_only": false, "value": "2026-09-10T10:15:11.441983Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-09)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "be9d1da4-1eda-43ef-8c9a-d82df8b7297e"}, {"timestamp": "2026-09-10T11:00:03.560Z", "date_only": false, "value": "2026-09-10T11:00:03.560194Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/5363", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d58041b7-d8f0-438d-96f4-754415a4ee5b", "url": "https://t.me/cissp/5363"}, {"timestamp": "2026-09-11T10:15:38.811Z", "date_only": false, "value": "2026-09-11T10:15:38.811572Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-10)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "9b817712-b6d7-47dd-b5a3-97825c97bbf4"}, {"timestamp": "2026-09-11T15:00:05.238Z", "date_only": false, "value": "2026-09-11T15:00:05.238957Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/2548", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ae43e3cc-c32f-4aa1-8013-a7f2a83fe03a", "url": "https://t.me/cissp/2548"}, {"timestamp": "2026-09-11T17:00:02.931Z", "date_only": false, "value": "2026-09-11T17:00:02.931166Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8603", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "392ffe5f-70b8-4156-822f-42fbf08062ae", "url": "https://t.me/true_secator/8603"}, {"timestamp": "2026-09-12T00:00:33.841Z", "date_only": false, "value": "2026-09-12T00:00:33.841210Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8603", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "160c0ea3-dffc-4bd1-a18c-cd2aa414e946", "url": "https://t.me/true_secator/8603"}, {"timestamp": "2026-09-12T10:15:16.742Z", "date_only": false, "value": "2026-09-12T10:15:16.742590Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-11)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "6a7f4ec3-6023-4c32-8da0-abeac5ba9798"}, {"timestamp": "2026-09-13T10:15:08.783Z", "date_only": false, "value": "2026-09-13T10:15:08.783638Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-12)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "a381c522-99cc-4028-8562-8690998996e0"}, {"timestamp": "2026-09-14T10:15:07.727Z", "date_only": false, "value": "2026-09-14T10:15:07.727638Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-13)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "edc8847b-3bc1-460c-a8b3-dd054a55ad7c"}, {"timestamp": "2026-09-16T10:00:09.102Z", "date_only": false, "value": "2026-09-16T10:00:09.102846Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "21353301-48cd-4bf2-8996-9bae5b6372ac"}, {"timestamp": "2026-09-16T10:15:10.737Z", "date_only": false, "value": "2026-09-16T10:15:10.737503Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-15)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7af8fe59-bacb-4a2d-a2dd-cbd9192615ea"}, {"timestamp": "2026-09-17T10:15:09.584Z", "date_only": false, "value": "2026-09-17T10:15:09.584550Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "f486416b-17c4-41d7-b765-a90eaa6a0e44"}, {"timestamp": "2026-09-18T10:15:06.811Z", "date_only": false, "value": "2026-09-18T10:15:06.811971Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-17)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "ba3259f0-d72f-4431-9175-38fe31c6040d"}, {"timestamp": "2026-09-19T10:15:10.592Z", "date_only": false, "value": "2026-09-19T10:15:10.592125Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-18)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "d17f29ab-e825-4596-9ff9-444eeccb02b4"}, {"timestamp": "2026-09-20T10:00:06.869Z", "date_only": false, "value": "2026-09-20T10:00:06.869441Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "7db714fb-b06a-4677-a428-31896b27ec1a"}, {"timestamp": "2026-09-20T10:15:07.958Z", "date_only": false, "value": "2026-09-20T10:15:07.958587Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-19)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "530e6cec-2548-4c87-9bdb-ca3f6c3077bf"}, {"timestamp": "2026-09-21T10:00:08.348Z", "date_only": false, "value": "2026-09-21T10:00:08.348057Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "4eaea3b4-3fe4-4b73-b34a-67797845b019"}, {"timestamp": "2026-09-21T10:15:07.768Z", "date_only": false, "value": "2026-09-21T10:15:07.768674Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-20)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "29596644-9dc5-4396-a3ae-c4737fb79e9a"}, {"timestamp": "2026-09-22T10:15:08.124Z", "date_only": false, "value": "2026-09-22T10:15:08.124794Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-21)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "c8e60f24-c6f4-4ade-9217-86b96e3dfa9e"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": false, "value": "2026-09-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-23)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "bb53e1c2-d34c-4a12-81c0-110e28c55043"}, {"timestamp": "2026-09-23T11:00:12Z", "date_only": false, "value": "2026-09-23T11:00:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/3LdrFlR-LEY1MNMAeK2_oak7FbRFWnHvSLklHTRJ1hQ0h1g", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "305ce019-2e8e-4923-b7d7-7902a5531d67"}, {"timestamp": "2026-09-23T11:00:12Z", "date_only": false, "value": "2026-09-23T11:00:12.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/3LdrFlR-LEY1MNMAeK2_oak7FbRFWnHvSLklHTRJ1hQ0h1g", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "5d06defb-ca54-4ce6-90b6-ae3bee393ef8"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": false, "value": "2026-09-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-24)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8f143468-a703-4fd0-aa2a-5edd17ee1cd6"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-25)", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "8c8bf07c-b301-4b6b-9a5e-c5ce761c898b"}, {"timestamp": "2026-09-25T10:04:01Z", "date_only": false, "value": "2026-09-25T10:04:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/deveshmi/34f90d17ad1ccd41a5f0ee22a0e8f98a", "record": "CVE-2021-26855", "field": "creation_timestamp", "uuid": "3e2adb7c-dd3c-46f9-949a-d8a538722ee3", "url": "https://gist.github.com/deveshmi/34f90d17ad1ccd41a5f0ee22a0e8f98a"}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2021-26855", "field": "timestamps.last_seen_at", "uuid": "246a4b42-70d9-4f6b-ae8b-12ee124156cc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": true, "value": "2026-10-24", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2021-26855", "field": "evidence.0.details.observation_date", "uuid": "246a4b42-70d9-4f6b-ae8b-12ee124156cc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-24T00:00:00Z", "date_only": false, "value": "2026-10-24T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2021-26855", "field": "status.status_updated_at", "uuid": "246a4b42-70d9-4f6b-ae8b-12ee124156cc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-26T01:00:02Z", "date_only": false, "value": "2026-10-26T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2021-26855", "field": "timestamps.recorded_at", "uuid": "246a4b42-70d9-4f6b-ae8b-12ee124156cc", "status": {"status_reason": "confirmed", "exploited": true}}]}