logo

8220 Gang targeting Confluence (Campaign)

ID: ee66ad0f-6d3d-526a-ba52-ec64cbda86f5

STIX ID: report--ee66ad0f-6d3d-526a-ba52-ec64cbda86f5

Feed Name: Wiz Cloud Threat Landscape

Threat Score
70/100

Date Published: 2022-07-07

Date Updated: 2026-05-01

Author: [email protected] (Wiz Threat Research)

...
...

The links point to analyses of the '8220 Gang' abusing Atlassian Confluence CVE-2022-26134 (a remote code execution vulnerability) to carry out an active cryptomining campaign targeting cloud-based infrastructure, covering the vulnerability, exploitation activity, and cryptominer deployment.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.