GCVE-110-CERTFI-2021-0009

Advisory Published

Vulnetix · Advisory published June 4, 2021

The FluBot campaign sending scam messages became active in Finland in June and is still causing trouble. Based on reports received by the National Cyber Security Center (NCSC-FI), scam messages written in Finnish are being sent to thousands of people in Finland. Earlier this summer, the message said there is a package in delivery and contained a link for tracking the delivery. The link tried to lure the recipient to a scam website and install the malicious FluBot software. In the new campaign, the messages use a voicemail theme. This alert was discontinued on 17 August 2021 after the situation settled.

Download JSON Open in Console

Threat Intelligence

Snort Rules (7)

1000772: ET EXPLOIT Apache HTTP Server Path Traversal Attempt (CVE-2021-41773)

1636543: SERVER-WEBAPP Apache HTTP Server path traversal attempt CVE-2021-41773

1885988: SERVER-WEB Apache HTTP Server 2.4.49 path traversal file disclosure attempt CVE-2021-41773

1830765: SERVER-WEB Apache HTTP Server path traversal attempt CVE-2021-41773

1131055: SERVER-WEBAPP Apache HTTP Server 2.4.49 path traversal attempt CVE-2021-41773

+ 2 more rules

Aliases

CVE-2021-41773

References

advisory

Browse GCVE Records

3,587 records in the GCVE database · Updated September 5, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON