Fake PoC Script Used to Trick Researchers into Downloading VenomRAT

🗓️ 20 Sep 2023 01:10:45Reported by WaqasType

hackread

hackread🔗 www.hackread.com👁 65 Views

Fake PoC Script Used to Trick Researchers into Downloading VenomRAT. New Malware Campaign Targets CVE-2023-40477 Vulnerability in WinRA

Reporter	Title	Published	Views	Family All 77
GithubExploit	Exploit for Improper Validation of Array Index in Rarlab Winrar	29 Aug 202316:29	–	githubexploit
AstraLinux	Astra Linux – Vulnerability in unrar-nonfree	20 May 202605:53	–	astralinux
Information Security Automation	August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper	30 Aug 202316:15	–	avleonov
BDU FSTEC	The vulnerability of the RAR4 file archiver WinRAR’s volume recovery processing system allows a hacker to execute arbitrary code.	21 Aug 202300:00	–	bdu_fstec
Circl	CVE-2023-40477	20 Aug 202302:20	–	circl
CNNVD	RAR 安全漏洞	28 Aug 202300:00	–	cnnvd
CVE	CVE-2023-40477	3 May 202402:11	–	cve
Cvelist	CVE-2023-40477 RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability	3 May 202402:11	–	cvelist
Debian	[SECURITY] [DLA 3542-1] unrar-nonfree security update	26 Aug 202320:48	–	debian
Debian	[SECURITY] [DLA 3543-1] rar security update	27 Aug 202306:29	–	debian

20 Sep 2023 01:10Current

6.8Medium risk

Vulners AI Score6.8

EPSS0.1308

fake poc researchers downloading venomrat malware campaign cve-2023-40477 winrar update links