Skip to content
Threat Feed
Subscribe

Tag

Telnet

4 briefs RSS
medium advisory

Accepted Default Telnet Port Connection

This threat brief details how threat actors exploit the insecure Telnet protocol on its default port 23 for initial access, lateral movement, and command and control, leveraging its unencrypted nature to compromise systems and exfiltrate data, emphasizing the need for robust detection and mitigation strategies.

telnet network-security remote-access plain-text initial-access lateral-movement command-and-control
1r 4t
high advisory

Detection of Accepted Default Telnet Port Connection

This brief details the detection of unencrypted Telnet traffic on its default port 23, a legacy protocol commonly used for remote administration but frequently exploited by threat actors for initial access or as a backdoor due to its plain-text nature, which exposes sensitive information and facilitates unauthorized access.

command-and-control lateral-movement initial-access telnet network-security detection elastic-rule
1r 4t
critical threat

Unpatched GNU Inetutils Telnet Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the GNU Inetutils Telnet server, potentially allowing unauthenticated attackers to execute arbitrary code on vulnerable systems.

telnet rce inetutils
2r 2t
high advisory

OpenCanary Telnet Login Attempt

The OpenCanary Telnet Login Attempt detection identifies unauthorized login attempts to a Telnet service monitored by an OpenCanary node, indicating potential reconnaissance or intrusion attempts targeting the network.

honeypot telnet reconnaissance intrusion opencanary
1r 2t