16attributed CVEs
0ATT&CK techniques
58.8IDF score (tooling uniqueness)
0exclusive CVEs
2017–2022years active
About this actor
Thief Libra is a cloud-focused threat group that has a history of cryptojacking operations as well as cloud service platform credential scraping. They were first known to operate on January 27, 2019. They use a variety of custom build Go Scripts as well as repurposed cryptojacking scripts from other groups including TeamTNT. They are currently considered to be an opportunistic threat group that targets exposed cloud instances and applications.
Source: MISP threat-actor catalog
Activity timeline
Find actors who…
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
CVE-2019-11510 KEV | 9.7 | 10.0 | 0.9446 | 2019-05-08 | application |
CVE-2019-16920 KEV | 9.6 | 9.8 | 0.9434 | 2019-09-27 | network |
CVE-2019-19781 KEV | 9.6 | 9.8 | 0.9444 | 2019-12-27 | network |
CVE-2019-7192 KEV | 9.6 | 9.8 | 0.9430 | 2019-12-05 | application |
CVE-2019-7194 KEV | 9.6 | 9.8 | 0.9394 | 2019-12-05 | application |
CVE-2019-7195 KEV | 9.6 | 9.8 | 0.9411 | 2019-12-05 | application |
CVE-2020-29583 KEV | 9.6 | 9.8 | 0.9432 | 2020-12-22 | network |
CVE-2020-8515 KEV | 9.6 | 9.8 | 0.9432 | 2020-02-01 | network |
CVE-2021-22893 KEV | 9.6 | 10.0 | 0.9361 | 2021-04-23 | application |
CVE-2018-0171 KEV | 9.5 | 9.8 | 0.9290 | 2018-03-28 | network |
CVE-2018-14847 KEV | 9.4 | 9.1 | 0.9365 | 2018-08-02 | network |
CVE-2018-13382 KEV | 9.0 | 9.1 | 0.8708 | 2019-06-04 | network |
CVE-2019-1652 KEV | 9.0 | 7.2 | 0.9273 | 2019-01-24 | network |
CVE-2017-6862 KEV | 6.5 | 9.8 | 0.4311 | 2017-05-26 | network |
CVE-2019-7193 KEV | 5.5 | 9.8 | 0.2579 | 2019-12-05 | other |
CVE-2019-15271 KEV | 4.1 | 8.8 | 0.0560 | 2019-11-26 | network |
Not tracked in MITRE ATT&CK (this actor has no technique associations in the STIX bundle).
Top mitigating NIST 800-53 controls (by ATT&CK technique coverage)
No mitigating-control coverage computed — actor has no MITRE ATT&CK techniques on file.
Co-occurring actors
- The Magic 16 shared CVEs
- menuPass 6 shared CVEs
- APT41 6 shared CVEs
- APT3 5 shared CVEs
- Winnti Group 5 shared CVEs
- APT1 5 shared CVEs
- APT19 5 shared CVEs
- Deep Panda 5 shared CVEs
- Leviathan 5 shared CVEs
- Dragonfly 3 shared CVEs
Similar actors
Overlapping CVEs
- The Magic 1.00
- APT1 0.12
- Winnti Group 0.12
- APT19 0.11
- Deep Panda 0.11
Active in same years
- APT1 6.00
- Deep Panda 6.00
- APT29 6.00
- Equation 6.00
- APT3 6.00