Active Spy Campaign Exploits Unpatched Windows Zero-Day

🗓️ 06 Sep 2018 16:01:36Reported by Tara SealsType

Active Spy Campaign Exploits Unpatched Windows Zero-Day. PowerPool group uses spear-phishing emails with malicious attachments, Windows zero-day exploit for admin privileges, and open-source lateral-movement tool

Source	Link
threatpost	www.threatpost.com/microsoft-windows-zero-day-found-in-task-scheduler/136977/
github	www.github.com/GossiTheDog/zeroday/blob/master/ALPC-TaskSched-LPE/ALPC-TaskSched-LPE.cpp
blog	www.blog.barkly.com/windows-task-scheduler-alpc-zero-day-exploit
sans	www.sans.org/reading-room/whitepapers/testing/pass-the-hash-attacks-tools-mitigation-33283
welivesecurity	www.welivesecurity.com/2018/09/05/powerpool-malware-exploits-zero-day-vulnerability/
blog	www.blog.0patch.com/2018/08/how-we-micropatched-publicly-dropped.html
kb	www.kb.cert.org/vuls/id/906424

06 Sep 2018 16:01Current

7.6High risk

Vulners AI Score7.6