Red October Attackers Return With CloudAtlas APT Campaign

🗓️ 10 Dec 2014 11:12:07Reported by Dennis FisherType

Attackers behind Red October APT campaign resurface with CloudAtlas APT campaign targeting same victims using spear phishing emails and similar malware tool

Reporter	Title	Published	Views	Family All 105
zdt	MS12-027 MSCOMCTL ActiveX Buffer Overflow	25 Apr 201200:00	–	zdt
zdt	MS12-027 - Office 2010 DEP/ASLR Bypass Exploit	28 Jan 201400:00	–	zdt
Gitee	Exploit for Out-of-bounds Write in Adobe Acrobat	20 Dec 201911:44	–	gitee
ICS	Top 10 Routinely Exploited Vulnerabilities	12 May 202012:00	–	ics
ICS	Potential for China Cyber Response to Heightened U.S.–China Tensions	20 Oct 202012:00	–	ics
ATTACKERKB	Microsoft Windows TabStrip MSCOMCTL.OCX RCE Vulnerability	15 Aug 201200:00	–	attackerkb
ATTACKERKB	CVE-2012-0158	10 Apr 201200:00	–	attackerkb
Information Security Automation	September 2023: VM courses, Bahasa Indonesia, Russian Podcasts, Goodbye Tinkoff, MS Patch Tuesday, Qualys TOP 20, Linux, Forrester, GigaOm, R-Vision VM	30 Sep 202319:31	–	avleonov
BDU FSTEC	The vulnerability of the MSCOMCTL.OCX component in the Microsoft Office software, the Microsoft SQL Server relational database management system, the Microsoft Commerce Server e-commerce software, and the Microsoft Visual FoxPro database development environment allows a perpetrator to execute arbitrary code.	7 Sep 202100:00	–	bdu_fstec
Carbon Black Blog	Technical Analysis: Hackers Leveraging COVID-19 Pandemic to Launch Phishing Attacks, Fake Apps/Maps, Trojans, Backdoors, Cryptominers, Botnets & Ransomware	19 Mar 202020:48	–	carbonblack

Source	Link
threatpost	www.threatpost.com/rocra-espionage-malware-campaign-uncovered-after-five-years-activity-011413
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
securelist	www.securelist.com/blog/research/68083/cloud-atlas-redoctober-apt-is-back-in-style/
twitter	www.twitter.com/hashtag/inception
twitter	www.twitter.com/hashtag/cloudatlas
twitter	www.twitter.com/hashtag/apt
twitter	www.twitter.com/hashtag/surveillance
twitter	www.twitter.com/CloudMe_com/status/542636290274246656
flickr	www.flickr.com/photos/pagedooley/

11 Dec 2014 17:50Current

0.3Low risk

Vulners AI Score0.3

EPSS0.9997