Beware of malware offering “Warm greetings from Saudi Aramco”

🗓️ 05 Mar 2022 17:35:27Reported by Malwarebytes LabsType

malwarebytes🔗 blog.malwarebytes.com👁 450 Views

Malware offering "Warm Greetings from Saudi Aramco", Formbook campaign targeting oil and gas companies, malware attachment disguised as an email from Saudi Aramco, using CVE-2017-11882 vulnerability to download and execute FormBook malwar

Reporter	Title	Published	Views	Family All 608
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	25 Jan 202112:44	–	githubexploit
GithubExploit	Exploit for CVE-2026-21509	27 Jan 202609:26	–	githubexploit
GithubExploit	Exploit for CVE-2026-21509	27 Jan 202613:56	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	16 Jan 201805:49	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	21 Nov 201715:22	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	20 Nov 201716:35	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	30 Dec 201713:20	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	12 Jan 201811:38	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	22 Nov 201701:11	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	21 Nov 201715:22	–	githubexploit

05 Mar 2022 17:35Current

8.6High risk

Vulners AI Score8.6

EPSS0.99945