Trellix Global Defenders: Defending against Cyber Espionage Campaigns – Operation Graphite

🗓️ 20 Jun 2022 00:00:00Reported by TrellixType

Trellix Global Defenders: Defending against Cyber Espionage Campaigns – Operation Graphite. Cyber espionage campaigns targeting high-ranking government officials in Western Asia and Eastern Europe. Attack triggered via targeted phishing with malicious macro enabled word document using CVE2021-40444 for remote code execution. Use of OneDrive as a command and control server, and embedded XLS into XLSX to bypass macro execution protection

Reporter	Title	Published	Views	Family All 153
Gitee	Exploit for Path Traversal in Microsoft	3 Oct 202120:23	–	gitee
Gitee	Exploit for Path Traversal in Microsoft	6 Sep 202500:58	–	gitee
Gitee	Exploit for Path Traversal in Microsoft	6 Sep 202500:46	–	gitee
Gitee	Exploit for Path Traversal in Microsoft	8 Oct 202115:46	–	gitee
Gitee	Exploit for Path Traversal in Microsoft	6 Nov 202103:51	–	gitee
Gitee	Exploit for Path Traversal in Microsoft	12 Sep 202112:47	–	gitee
Gitee	Exploit for Path Traversal in Microsoft	9 Oct 202114:52	–	gitee
0day.today	Microsoft Office Word MSHTML Remote Code Execution Exploit	9 Dec 202100:00	–	zdt
GithubExploit	Exploit for CVE-2022-30190	31 May 202214:10	–	githubexploit
GithubExploit	Exploit for Path Traversal in Microsoft	5 Jun 202302:27	–	githubexploit

20 Jun 2022 00:00Current

9.4High risk

Vulners AI Score9.4

CVSS 26.8

CVSS 3.17.8 - 8.8

EPSS0.96843

SSVC