CactusPete APT group’s updated Bisonal backdoor

🗓️ 13 Aug 2020 10:00:09Reported by Konstantin ZykovType

CactusPete APT group’s updated Bisonal backdoor campaign targeting financial and military sectors in Eastern Europe, employing spear-phishing messages with malicious attachments, employing hardcoded Cyrillic codepage for target location, using RC4-encrypted HTTP-based protocol for C2 communication

Reporter	Title	Published	Views	Family All 110
0day.today	Microsoft Internet Explorer 11 #InternetExplorer #IE (#Windows7 x64/x86) - vbscript Code Execution E	24 May 201800:00	–	zdt
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	23 May 201910:28	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	1 Jun 201822:12	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	30 May 201803:12	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	22 May 201821:50	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	10 Jul 201819:31	–	githubexploit
Gitee	Exploit for CVE-2014-4878	28 Mar 202000:48	–	gitee
ATTACKERKB	CVE-2018-8174	9 May 201800:00	–	attackerkb
Information Security Automation	September 2023: VM courses, Bahasa Indonesia, Russian Podcasts, Goodbye Tinkoff, MS Patch Tuesday, Qualys TOP 20, Linux, Forrester, GigaOm, R-Vision VM	30 Sep 202319:31	–	avleonov
BDU FSTEC	The vulnerability of VBScript script handlers in Windows operating systems allows attackers to execute arbitrary code.	22 Jun 201800:00	–	bdu_fstec