Storm-0978 attacks reveal financial and espionage motives

🗓️ 11 Jul 2023 17:30:00Reported by Microsoft Threat IntelligenceType

Microsoft identifies Storm-0978 phishing campaign targeting defense and government entities in Europe and North America. The campaign exploits CVE-2023-36884 via Word documents with lures related to the Ukrainian World Congress. Actor known for ransomware attacks and espionage motives

Reporter	Title	Published	Views	Family All 99
GithubExploit	Exploit for Race Condition in Microsoft	28 Sep 202311:53	–	githubexploit
GithubExploit	Exploit for Race Condition in Microsoft	17 Jul 202314:02	–	githubexploit
GithubExploit	Exploit for Race Condition in Microsoft	12 Jul 202314:13	–	githubexploit
ATTACKERKB	CVE-2023-36884	11 Jul 202300:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday July 2023: Vulristics improvements, Office RCE, SFB SmartScreen and Outlook, EoP MSHTML and ERS, other RCEs	28 Jul 202309:37	–	avleonov
Information Security Automation	August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper	30 Aug 202316:15	–	avleonov
BDU FSTEC	The vulnerability of Windows operating systems and Microsoft Office software, related to errors in processing input data, allows a perpetrator to execute arbitrary code.	12 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-36884	11 Jul 202321:56	–	circl
CISA KEV Catalog	Microsoft Windows Search Remote Code Execution Vulnerability	17 Jul 202300:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	17 Jul 202312:00	–	cisa

11 Jul 2023 17:30Current

8High risk

Vulners AI Score8

EPSS0.99083