Vulnerabilityhigh
The Carbanak Group targets entities in Middle East and US
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-2545 | Malformed EPS Image RCE in Microsoft Office | — | 86% | KEV | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 154.16.138.74 | macros to download the final Spy.Sekur payload from hxxp://154.16.138[.]74/sexit.exe” In this second campaign, hackers leveraged on |
| url | http://154.16.138.74/sexit.exe” | oc” use macros to download the final Spy.Sekur payload from hxxp://154.16.138[.]74/sexit.exe” In this second campaign, hackers leveraged on emails cont |
From the original article
4 min read at securityaffairs.comProofpoint has collected evidence of new Carbanak group campaigns. The hackers are targeting banks in the Middle East, the United States and other countries. Security researchers at Proofpoint firm sustain to have collected evidence of new Carbanak group campaigns.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.