Ransomwarehigh

SecureX

Cisco TalosSep 12, 2022 · 15:32 UTC (Sep 12, 2022)8 min read1 · 1 read

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-1675 CVE-2021-34527

Tags: cve-2021-1675 cve-2021-34527 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-1675	Remote Code Execution in Microsoft Windows Print Spooler (PrintNightmare)	7.8	85%	KEVRansomwarePoC	Jun 8, 2021 KEV Nov 3, 2021
CVE-2021-34527	PrintNightmare: Remote Code Execution in Microsoft Windows Print Spooler	8.8	100%	KEVRansomwarePoC ×3	Jul 2, 2021 KEV Nov 3, 2021

From the original article

8 min read at blog.talosintelligence.com

WarmCookie is a malware family that emerged in April 2024 and has been distributed via regularly conducted malspam and malvertising campaigns. Cybercriminals are abusing Advanced Installer, a legitimate Windows tool used for creating software packages, to drop cryptocurrency-mining malware including PhoenixMiner and lolMiner on infected machines.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.