Double Whammy: When One Attack Masks Another Attack

🗓️ 20 Nov 2017 16:29:06Reported by Trend MicroType

trendmicroblog🔗 blog.trendmicro.com👁 276 Views

A new style of hacking leverages distraction to mask more damaging malicious activity within cyber security landscape, such as Bad Rabbit ransomware which hid spear phishing campaign

Reporter	Title	Published	Views	Family All 97
Gitee	Exploit for CVE-2017-0143	6 Sep 202500:38	–	gitee
zdt	Microsoft Windows - Uncredentialed SMB RCE (MS17-010) Exploit	17 Apr 201700:00	–	zdt
zdt	Microsoft Windows - SrvOs2FeaToNt SMB Remote Code Execution (MS17-010) Exploit	10 May 201700:00	–	zdt
zdt	Microsoft Windows MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption Exploit	17 May 201700:00	–	zdt
zdt	DOUBLEPULSAR - Payload Execution and Neutralization Exploit	4 Oct 201900:00	–	zdt
zdt	SMB DOUBLEPULSAR Remote Code Execution Exploit	4 Feb 202000:00	–	zdt
Tenable Nessus	SMB Server DOUBLEPULSAR Backdoor / Implant Detection (EternalRocks)	18 Apr 201700:00	–	nessus
Tenable Nessus	Ransomware Traffic Detected (WannaCry)	15 May 201700:00	–	nessus
Tenable Nessus	MS17-010: Security Update for Microsoft Windows SMB Server (4013389) (ETERNALBLUE) (ETERNALCHAMPION) (ETERNALROMANCE) (ETERNALSYNERGY) (WannaCry) (EternalRocks) (Petya) (uncredentialed check)	20 Mar 201700:00	–	nessus
Tenable Nessus	MS17-010: Security Update for Microsoft Windows SMB Server (4013389) (ETERNALBLUE) (ETERNALCHAMPION) (ETERNALROMANCE) (ETERNALSYNERGY) (WannaCry) (EternalRocks) (Petya)	15 Mar 201700:00	–	nessus