Raspberry Robin Malware Upgrades with Discord Spread and New Exploits
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-1054 | Privilege Escalation in Microsoft Windows Win32k Kernel Driver (CVE-2020-1054) | 7.0 | 54% | KEVPoC | KEV |
| CVE-2021-1732 | Out-of-Bounds Write Local Privilege Escalation in Microsoft Win32k (CVE-2021-1732) | 7.8 | 78% | KEVRansomwarePoC ×2 | KEV |
| CVE-2023-29360 | Untrusted Pointer Dereference in Microsoft Streaming Service Grants SYSTEM Privileges | 8.4 | 22% | KEV | KEV |
| CVE-2023-36802 | Use-After-Free Privilege Escalation in Microsoft Streaming Service Proxy | 7.8 | 28% | KEV | KEV |
From the original article
2 min read at thehackernews.com
The operators of Raspberry Robin are now using two new one-day exploits to achieve local privilege escalation, even as the malware continues to be refined and improved to make it stealthier than before. This means that "Raspberry Robin has access to an exploit seller or its authors develop the exploits themselves in a short period of time," Check Point said in a report this week.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.