Proactive Security for CVE-2025-53770 and CVE-2025-53771 SharePoint Attacks ======================================================================================================================== Indicator Detection name Description 92bb4ddb98eeaf11fc15bb32e71d0a63256a0ed826a03ba293ce3a8bf057a514 Trojan.ASP.WEBSHELL.THGBABE spinstall0.aspx 8d3d3f3a17d233bc8562765e61f7314ca7a08130ac0fb153ffd091612920b0f2 Trojan.MSIL.WEBSHELL.THGBABE spinstall0.aspx 27c45b8ed7b8a7e5fff473b50c24028bd028a9fe8e25e5cea2bf5e676e531014 Trojan.ASP.WEBSHELL.THGBABE spinstall0.aspx b336f936be13b3d01a8544ea3906193608022b40c28dd8f1f281e361c9b64e93 Trojan.ASP.WEBSHELL.THGBABE test.txt ======================================================================================================================== 103.186.30.186 C&C server 104.238.159.149 C&C server 107.191.58.76 C&C server 96.9.125.147 C&C server