New Mispadu Banking Trojan Exploiting Windows SmartScreen Flaw

🗓️ 05 Feb 2024 03:45:00Reported by The Hacker NewsType

Mispadu banking Trojan exploiting Windows SmartScreen flaw to target Mexico and Latin American region, part of larger LATAM banking malware family. New infection chain using rogue internet shortcut files contained within bogus ZIP archive files and exploiting CVE-2023-36025 (CVSS score: 8.8) addressed by Microsoft in November 2023. Targeting victims selectively based on geographic location and system configurations

Reporter	Title	Published	Views	Family All 76
GithubExploit	Exploit for CVE-2023-36025	28 Dec 202323:29	–	githubexploit
GithubExploit	Exploit for CVE-2023-36025	17 Nov 202315:46	–	githubexploit
ATTACKERKB	CVE-2023-36025	14 Nov 202300:00	–	attackerkb
Information Security Automation	November 2023 – January 2024: New Vulristics Features, 3 Months of Microsoft Patch Tuesdays and Linux Patch Wednesdays, Year 2023 in Review	1 Feb 202417:07	–	avleonov
BDU FSTEC	The vulnerability of the SmartScreen security component, which prevents unauthorized access and malicious programs from being executed on Windows operating systems, allows attackers to circumvent security restrictions.	18 Nov 202300:00	–	bdu_fstec
Circl	CVE-2023-36025	14 Nov 202321:10	–	circl
CISA KEV Catalog	Microsoft Windows SmartScreen Security Feature Bypass Vulnerability	14 Nov 202300:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	14 Nov 202312:00	–	cisa
CNNVD	Microsoft Windows SmartScreen Security Vulnerability	14 Nov 202300:00	–	cnnvd
CVE	CVE-2023-36025	14 Nov 202317:57	–	cve