Cloud Threat Landscape

Incidents
Actors
Techniques
Defenses
ABC Poster
Periodic Table
Tools
Targeted Technologies
About
RSS
STIX
Back to wiz.io

Cloud Threat Landscape

SAP NetWeaver Visual Composer exploitation campaign

Type

Campaign

Actors

Pub. date

April 22, 2025

Initial access

0-day vulnerability

Impact

Unknown

Observed techniques

Webshell deployment

Observed tools

Brute Ratel Heaven’s Gate

Targeted technologies

References

https://reliaquest.com/blog/threat-spotlight-reliaquest-uncovers-vulnerability-behind-sap-netweaver-compromise/https://onapsis.com/blog/active-exploitation-of-sap-vulnerability-cve-2025-31324/

Status

Stub

Last edited

Apr 29, 2025 9:26 AM

Made with 💙 by Wiz

Last Updated: April 3, 2025