Storm-0978 attacks reveal financial and espionage motives

🗓️ 11 Jul 2023 17:30:00Reported by Microsoft Threat IntelligenceType

Phishing campaign by Storm-0978 targeting defense and government entities in Europe and North America. Exploited CVE-2023-36884 to deliver backdoor with espionage and financial motives

Reporter	Title	Published	Views	Family All 99
GithubExploit	Exploit for Race Condition in Microsoft	28 Sep 202311:53	–	githubexploit
GithubExploit	Exploit for Race Condition in Microsoft	17 Jul 202314:02	–	githubexploit
GithubExploit	Exploit for Race Condition in Microsoft	12 Jul 202314:13	–	githubexploit
ATTACKERKB	CVE-2023-36884	11 Jul 202300:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday July 2023: Vulristics improvements, Office RCE, SFB SmartScreen and Outlook, EoP MSHTML and ERS, other RCEs	28 Jul 202309:37	–	avleonov
Information Security Automation	August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper	30 Aug 202316:15	–	avleonov
BDU FSTEC	The vulnerability of Windows operating systems and Microsoft Office software, related to errors in processing input data, allows a perpetrator to execute arbitrary code.	12 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-36884	11 Jul 202321:56	–	circl
CISA KEV Catalog	Microsoft Windows Search Remote Code Execution Vulnerability	17 Jul 202300:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	17 Jul 202312:00	–	cisa