Ransomwarehigh
Cybercriminal greeners from Iran attack companies for financial gain
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-0213 | Local Privilege Escalation in Microsoft Windows COM Aggregate Marshaler | 7.3 | 84% | KEVRansomwarePoC | KEV |
From the original article
4 min read at securityaffairs.com
Group-IB has detected financially motivated attacks carried out in June by newbie threat actors from Iran. The attackers used Dharma ransomware and a mix of publicly available tools to target companies in Russia, Japan, China, and India. All the affected organizations had hosts with Internet-facing RDP and weak credentials.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.