Skip to content
Product
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Public IOC feed
Free blocklists: domains, IPs, hashes, wallets. No key.
Dark web
First-party leak-site collection: victims and groups.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
Docs
Pricing
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Public IOC feed
Dark web
CLI & agents
Docs
Pricing
Contact
Get a free key
Sign in
Back
Ghost CMS SQL Injection
Vulnerability
Threat entity extracted from intelligence sources
Entities
›
vulnerability
›
Ghost CMS SQL Injection
Frequency
1
occurrences
First Seen
August 25, 2026
Last Seen
August 25, 2026
API
Overview
Recent Events
Profile
Profile
MITRE ATT&CK
1 / 2
Associated Malware
Amatera Stealer
Hijackloader
PavinLoader
Tools Used
Dropbox
MSBuild
PowerShell
VMware
WiX Burn
MITRE Techniques
T1027 - Obfuscated Files Or Information
T1036 - Masquerading
T1059.001 - PowerShell
T1059.003 - Windows Command Shell
T1071.001 - Web Protocols
T1071 - Application Layer Protocol
T1562.001 - Disable Or Modify Tools
Campaigns
ClickFix Campaigns
Affected Platforms
Parallels
QEMU
VirtualBox
Windows
Xen
-
REC
Recon
No techniques detected
-
RD
Resource Dev
No techniques detected
-
IA
Initial Access
No techniques detected
1
EX
Execution
T1059.001 - PowerShell
-
PE
Persistence
No techniques detected
-
PE
Priv Esc
No techniques detected
3
DE
Defense Evasion
T1027 - Obfuscated Files Or Information
T1036 - Masquerading
T1562.001 - Disable Or Modify Tools
-
CA
Cred Access
No techniques detected
-
DI
Discovery
No techniques detected
-
LM
Lateral Mov
No techniques detected
-
CO
Collection
No techniques detected
1
C2
C2
T1071.001 - Web Protocols
-
EX
Exfil
No techniques detected
-
IM
Impact
No techniques detected
5
techniques detected across
3
tactics
Related Clusters (1)
PavinLoader Malware Exploits ClickFix and Fake Downloads to Deploy Amatera Stealer
Aug 25
·
2 sources
65
Related Articles (1)
PavinLoader Malware Spreads via ClickFix and Fake Download Campaigns
Technadu
·
Aug 25
Related Entities
Malware
Sql Injection
ClickFix Campaigns
Amazon
Google
CWE-89 - SQL Injection
Amatera Stealer
Hijackloader
PavinLoader
T1027 - Obfuscated Files Or Information
T1036 - Masquerading
T1059.001 - PowerShell
