Exploit / PoCcritical
South Korean Spies Exploit WPS Office Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-7262+1 related CVE | Path Traversal Arbitrary Library Load in Kingsoft WPS Office for Windows | 9.3 | 3% | KEV | KEV |
From the original article
2 min read at infosecurity-magazine.com
ESET has revealed a new cyber-espionage campaign linked to a South Korean APT in which a novel remote code execution (RCE) vulnerability in WPS Office for Windows was exploited to deploy a custom backdoor. Traced to the Seoul-aligned APT-C-60 group, the campaign targeted victims in East Asia with the “SpyGlace” backdoor, which is loaded with cyber-espionage capabilities.
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.