Lucene search

Trellix Global Defenders: Defending against Cyber Espionage Campaigns – Operation Graphite

🗓️ 20 Jun 2022 00:00:00Reported by TrellixType

Trellix Global Defenders: Defending against Cyber Espionage Campaigns – Operation Graphite. Cyber espionage campaigns targeting high-ranking government officials in Western Asia and Eastern Europe. Attack triggered via targeted phishing with malicious macro enabled word document using CVE2021-40444 for remote code execution. Use of OneDrive as a command and control server, and embedded XLS into XLSX to bypass macro execution protection

Reporter	Title	Published	Views	Family All 150
Check Point Advisories	Microsoft Internet Explorer MSHTML Remote Code Execution (CVE-2021-40444)	9 Sep 202100:00	–	checkpoint_advisories
Malwarebytes	MSHTML attack targets Russian state rocket centre and interior ministry	22 Sep 202119:16	–	malwarebytes
Malwarebytes	Meet Exotic Lily, access broker for ransomware and other malware peddlers	18 Mar 202222:58	–	malwarebytes
Malwarebytes	[updated] Windows MSHTML zero-day actively exploited, mitigations required	8 Sep 202111:04	–	malwarebytes
Malwarebytes	New spear phishing campaign targets Russian dissidents	29 Mar 202218:02	–	malwarebytes
Malwarebytes	[updated] Patch now! PrintNightmare over, MSHTML fixed, a new horror appears … OMIGOD	15 Sep 202113:19	–	malwarebytes
Trend Micro Simply Security	FormBook Adds Latest Office 365 0-Day Vulnerability (CVE-2021-40444) to Its Arsenal	29 Sep 202100:00	–	trendmicroblog
Trend Micro Simply Security	Remote Code Execution 0-Day (CVE-2021-40444) Hits Windows, Triggered Via Office Docs	9 Sep 202100:00	–	trendmicroblog
The Hacker News	Windows MSHTML 0-Day Exploited to Deploy Cobalt Strike Beacon in Targeted Attacks	16 Sep 202107:19	–	thn
The Hacker News	Microsoft MSHTML Flaw Exploited to Deliver MerkSpy Spyware Tool	3 Jul 202409:53	–	thn

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 Jun 2022 00:00Current

9.4High risk

Vulners AI Score9.4

CVSS26.8

CVSS38.8

EPSS0.969