Ransomwarehigh
New campaign leverages RIG Exploit kit to deliver the Cerber Ransomware
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-5122 | Use-After-Free RCE in Adobe Flash Player AS3 DisplayObject | — | 87% | KEV | — KEV |
| CVE-2015-8651 | Integer Overflow in Adobe Flash Player Enables Remote Code Execution | — | 68% | KEV | — KEV |
| CVE-2016-0034 | Remote Code Execution via Crafted Website in Microsoft Silverlight 5 | 8.8 | 69% | KEVRansomware | KEV |
| CVE-2016-1019 | Arbitrary code execution flaw in Adobe Flash Player, used in ransomware attacks | 9.8 | 22% | KEVRansomware | KEV |
| CVE-2016-3298 | Information Disclosure in Microsoft Internet Explorer Messaging API | 6.5 | 33% | KEV | KEV |
| CVE-2016-4117 | Arbitrary Code Execution in Adobe Flash Player 21.0.0.226 and earlier | 9.8 | 94% | KEVRansomwarePoC | KEV |
CVE-2016-7200+1 related CVE | Memory Corruption RCE in Microsoft Edge Chakra JavaScript Engine (CVE-2016-7200) | 8.8 | 83% | KEVPoC ×3 | KEV |
From the original article
2 min read at securityaffairs.comExperts from Heimdal Security warned of a spike in cyber attacks leveraging the popular RIG Exploit kit to deliver the Cerber Ransomware. The RIG exploit kit is even more popular in the criminal ecosystem, a few days ago security experts at Heimdal Security warned of a spike in cyber attacks leveraging the popular Neutrino and RIG EKs.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.