Security company: WebLogic high-risk vulnerability caused hacker intrusion, server turned into Monero mining machine

According to Tencent Yujian Threat Intelligence Center, hackers recently used suspected WebLogic deserialization vulnerabilities to invade servers for mining. After the vulnerability attack is successful, they will download the mining Trojan Real.exe. Analysis shows that the Trojan is written in Python. Once the server is infected with this Trojan, it will cause serious consumption of machine resources and seriously affect daily work operations. The Trojan has currently infected nearly 10,000 servers. Among them, Beijing, Shanghai and Guangzhou ranked the top three in terms of the degree of damage.