Agent Tesla RAT Returns in COVID-19 Vax Phish

🗓️ 21 Jun 2021 17:20:24Reported by Tara SealsType

Agent Tesla RAT targeting Windows machines via COVID-19 vaccination schedule phishing campaign, using malicious email attachments exploiting Microsoft Office vulnerability CVE-2017-11882 to execute malware

Reporter	Title	Published	Views	Family All 639
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	25 Jan 202112:44	–	githubexploit
GithubExploit	Exploit for CVE-2026-21509	27 Jan 202609:26	–	githubexploit
GithubExploit	Exploit for CVE-2026-21509	27 Jan 202613:56	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	16 Jan 201805:49	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	21 Nov 201715:22	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	20 Nov 201716:35	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	30 Dec 201713:20	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	12 Jan 201811:38	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	22 Nov 201701:11	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft	21 Nov 201715:22	–	githubexploit

Source	Link
threatpost	www.threatpost.com/newsletter-sign/
threatpost	www.threatpost.com/agent-tesla-microsoft-asmi/163581/
msrc	www.msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2017-11882
hotforsecurity	www.hotforsecurity.bitdefender.com/blog/threat-actors-spread-agent-tesla-disguised-as-covid-19-vaccination-registration-25998.html
reuters	www.reuters.com/business/healthcare-pharmaceuticals/south-korea-expands-vaccination-with-jjs-covid-19-shot-offered-by-us-2021-06-01/
threatpost	www.threatpost.com/covid-19-scam-scramble-cybercrooks-recycle/154383/
threatpost	www.threatpost.com/spearphishing-campaign-exploits-covid-19-to-spread-lokibot-infostealer/154432/
threatpost	www.threatpost.com/webinars/tips-and-tactics-for-better-threat-hunting/
threatpost	www.threatpost.com/webinars/tips-and-tactics-for-better-threat-hunting/
threatpost	www.threatpost.com/webinars/tips-and-tactics-for-better-threat-hunting/

21 Jun 2021 17:20Current

8.3High risk

Vulners AI Score8.3

CVSS 3.17.8

CVSS 29.3

EPSS0.99945

SSVC