Vulnerabilitymedium

Cycldek: Bridging the (air) gap

Kaspersky Securelistby @SecurelistJun 3, 2020 · 10:00 UTC (Jun 3, 2020)13 min read3

Read at securelist.com

Analyze CVE-2012-0158 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2012-0158 CVE-2017-11882 CVE-2018-0802

Tags: cve-2012-0158 cve-2017-11882 cve-2018-0802 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2012-0158	Remote Code Execution in Microsoft MSCOMCTL.OCX (Windows Common Controls)	—	100%	KEVRansomware	— KEV Nov 3, 2021
CVE-2017-11882	Memory Corruption RCE in Microsoft Office via Legacy Equation Editor	7.8	100%	KEVRansomwarePoC ×10	Nov 15, 2017 KEV Nov 3, 2021
CVE-2018-0802	Memory Corruption RCE in Microsoft Office Equation Editor	7.8	93%	KEVRansomwarePoC ×3	Jan 10, 2018 KEV Nov 3, 2021

From the original article

13 min read at securelist.com

While investigating attacks related to a group named Cycldek post 2018, we were able to uncover various pieces of information on its activities that were not known thus far. In this blog post we aim to bridge the knowledge gap on this group and provide a more thorough insight into its latest activities and modus operandi.

Kaspersky Securelist

By @Securelist · securelist.com

Read the full article at Kaspersky Securelist

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.