Microsoft Warns of North Korean Attacks Exploiting JetBrains TeamCity Flaw

🗓️ 19 Oct 2023 07:11:00Reported by The Hacker NewsType

Microsoft warns of North Korean attacks exploiting JetBrains TeamCity flaw. Attacks attributed to Diamond Sleet and Onyx Sleet, part of Lazarus Group. Exploits lead to implant deployment, malicious DLL use, and proxy tool deployment

Reporter	Title	Published	Views	Family All 61
0day.today	JetBrains TeamCity Unauthenticated Remote Code Execution Exploit	2 Oct 202300:00	–	zdt
0day.today	JetBrains TeamCity 2023.05.3 - Remote Code Execution Exploit	14 Mar 202400:00	–	zdt
GithubExploit	Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity	24 Apr 202416:33	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity	7 Jan 202422:29	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity	20 Sep 202412:15	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity	21 Apr 202413:52	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity	21 Apr 202413:52	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity	5 Jul 202417:39	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity	24 Aug 202417:17	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity	5 Oct 202318:12	–	githubexploit

19 Oct 2023 07:15Current

7.3High risk

Vulners AI Score7.3

CVSS 3.19.8

EPSS0.99979