What other aliases and vendor names is SLIME88 known by?

SLIME88 is tracked across the cybersecurity industry by multiple aliases, including: no other verified aliases.

What are the primary motivations and sponsors of SLIME88?

SLIME88 operates from China with primary motivation categorized as espionage, sponsored or affiliated with China (attributed).

What vulnerabilities and CVEs does SLIME88 actively exploit?

SLIME88 has been observed weaponizing vulnerabilities including CVE-2024-32114, CVE-2026-34197.

SLIME88

ACTIVE CAMPAIGN TRACKED ⚠ Critical Threat China

Primary Aliases: No secondary vendor aliases recorded.

Sponsor / State Affiliation China (attributed)

Primary Motivation espionage

Active Timeline Unknown – Present

Confidence Rating 85% (Grounded)

Apache ActiveMQ CVE-2026-34197 Exploitation

⚔️ Weaponized CVE Matrix (2)

CVE-2024-32114

Weaponized Vulnerability

CVSS 8.5 KEV EPSS 85.0%

CVE-2026-34197

Weaponized Vulnerability

CVSS 8.5 KEV EPSS 85.0%

🎯 Target Sectors & Focus

IT services Manufacturing Financial services Healthcare Government

🛡️ MITRE ATT&CK® Attack Lifecycle (7 TTPs)

📥 Download Navigator JSON

Execution 1

T1059 Exploitation of CVE-2026-34197 (Remote Code Execution)

↗

Credential Access & Discovery 1

T1003 Exploitation of default credentials

↗

Command & Control 2

T1071 Malicious XML configuration injection

↗

T1071 SoxAgent RAT deployment

↗

Operational Techniques 3

T1000 Jolokia API exploitation

↗

T1000 Authentication bypass via CVE-2024-32114

↗

T1000 Establishment of ORB networks (GOBLIN14)

↗

📰 Verified Campaigns & Intelligence Archive

🔔 Subscribe to Alerts

No recent breaking campaign alerts recorded in the FlagThis threat database.

Copied to clipboard

LINK COPIED TO CLIPBOARD

SLIME88

⚔️ Weaponized CVE Matrix (2)

🎯 Target Sectors & Focus

🛡️ MITRE ATT&CK® Attack Lifecycle (7 TTPs)

📰 Verified Campaigns & Intelligence Archive

SHARE INTELLIGENCE WIRE