Grand Theft Auto Panda APT Espionage Attack Platform

🗓️ 25 Nov 2013 10:26:50Reported by Michael MimosoType

Discover a mature attack platform called Grand Theft Auto Panda targeting the automotive industry in Asia, employing CVE-2012-0158 exploits through phishing emails & website to inject malware, steal data, and open backdoor connections

Reporter	Title	Published	Views	Family All 107
zdt	MS12-027 MSCOMCTL ActiveX Buffer Overflow	25 Apr 201200:00	–	zdt
zdt	MS12-027 - Office 2010 DEP/ASLR Bypass Exploit	28 Jan 201400:00	–	zdt
Gitee	Exploit for Out-of-bounds Write in Adobe Acrobat	20 Dec 201911:44	–	gitee
ICS	Top 10 Routinely Exploited Vulnerabilities	12 May 202012:00	–	ics
ICS	Potential for China Cyber Response to Heightened U.S.–China Tensions	20 Oct 202012:00	–	ics
ATTACKERKB	Microsoft Windows TabStrip MSCOMCTL.OCX RCE Vulnerability	15 Aug 201200:00	–	attackerkb
ATTACKERKB	CVE-2012-0158	10 Apr 201200:00	–	attackerkb
Information Security Automation	September 2023: VM courses, Bahasa Indonesia, Russian Podcasts, Goodbye Tinkoff, MS Patch Tuesday, Qualys TOP 20, Linux, Forrester, GigaOm, R-Vision VM	30 Sep 202319:31	–	avleonov
BDU FSTEC	The vulnerability of the MSCOMCTL.OCX component in the Microsoft Office software, the Microsoft SQL Server relational database management system, the Microsoft Commerce Server e-commerce software, and the Microsoft Visual FoxPro database development environment allows a perpetrator to execute arbitrary code.	7 Sep 202100:00	–	bdu_fstec
Carbon Black Blog	Technical Analysis: Hackers Leveraging COVID-19 Pandemic to Launch Phishing Attacks, Fake Apps/Maps, Trojans, Backdoors, Cryptominers, Botnets & Ransomware	19 Mar 202020:48	–	carbonblack

Source	Link
cylance	www.cylance.com/techblog/Grand-Theft-Auto-Panda.shtml
web	www.web.nvd.nist.gov/view/vuln/detail
threatpost	www.threatpost.com/comment-crew-expos-new-level-china-attack-attribution-021913
threatpost	www.threatpost.com/icefog-espionage-campaign-is-hit-and-run-targeted-operation/102417
threatpost	www.threatpost.com/net-traveler-espionage-campaign-uncovered-links-to-gh0st-rat-titan-rain-found/100865
threatpost	www.threatpost.com/nettraveler-variant-adds-java-exploits-watering-hole-attacks-to-bag-of-tricks/102156

27 Nov 2013 20:28Current

0.1Low risk

Vulners AI Score0.1

EPSS0.99976