Exploit / PoCcritical
FireEye has discovered a watering hole attack based on 0
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-0322 | Use-After-Free Remote Code Execution in Microsoft Internet Explorer | — | 85% | KEV | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 118.99.60.142 | ers [ ] com .., which at the time of publishing resolves to 118.99.60.142. The domain info [ . ] flnet [ . ] org also resolved to thi |
| md5 | 8455bbb9a210ce603a1b646b0d951bce | n XOR (0×95) payload that executed a ZxShell backdoor (MD5: 8455bbb9a210ce603a1b646b0d951bce). The compile date of the payload was 2014-02-11, and the l |
From the original article
4 min read at securityaffairs.com
Security researchers from FireEye have recently discovered a new IE 10 Zero-Day exploit being used in a watering hole attack. Security experts at FireEye discovered a new IE 10 Zero-Day exploit (CVE-2014-0322) being used in a watering hole attack on the US Veterans of Foreign Wars (VFW) website.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.