Lucene search

K
hiveproHive ProHIVEPRO:0571ED9C97B17424CD03FD89EF61D93B
HistoryFeb 20, 2024 - 11:51 a.m.

Attacks, Vulnerabilities and Actors 12 to 18 February 2024

2024-02-2011:51:51
Hive Pro
www.hivepro.com
16
cybersecurity
threats
attacks
vulnerabilities
adversaries
zero-day
exploited
patch tuesday
cve-2024-21412
water hydra apt
microsoft defender smartscreen
darkme malware
spearphishing
coyote
banking trojan
volt typhoon
critical infrastructure
threat digests
newsletters.

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

7.5 High

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.009 Low

EPSS

Percentile

82.0%

For a detailed threat digest, download the pdf file here Summary HiveForce Labs recently made several significant discoveries in the realm of cybersecurity threats. In the past week alone, a total of eight attacks were executed, five vulnerabilities were uncovered, and three active adversaries were identified. These findings underscore the persistent danger of cyberattacks. Furthermore, HiveForce Labs revealed two zero-day exploited vulnerabilities that have been addressed as part of February 2024 patch Tuesday. One of these vulnerabilities (CVE-2024-21412) was exploited by Water Hydra APT group, to bypass Microsoft Defender SmartScreen, targeting financial traders with DarkMe malware through sophisticated spearphishing tactics. The Coyote, a new banking trojan is currently targeting more than 60 banking institutions, primarily in Brazil. Volt Typhoon is actively targeting critical infrastructure in the United States and African countries, employing sophisticated tactics. These attacks are on the rise, posing a significant threat to users worldwide. Subscribe to receive our weekly threat digests and newsletters directly in your inbox.

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

7.5 High

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.009 Low

EPSS

Percentile

82.0%