Cyber Threat Report: 'Magnet Goblin Targets Publicly Facing Servers Using 1-Day Vulnerabilities - Check Point Research'

This blog post from CheckPoint Research describes a campaign targeting Ivanti, Magento, Qlink Sense and possibly Apache ActiveMQ systems which they attribute to the Magnet Goblin intrusion set. According to the report Magnet Goblin use '1-day' vulnerabilities and deploy tools including a Linux version the NerbianRAT malware, WARPWIRE (a JavaScript credential stealer), MiniNerbian (a small Linux backdoor) and Windows remote monitoring and management (RMM) tools. The report provides technical analysis of the different parts of the campaign and also includes indicators of compromise (IoCs).