Exploit / PoCcritical
Buckeye group used Equation Group tools prior to ShadowBrokers leak
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-0143 | Remote Code Execution in Microsoft Windows SMBv1 (EternalBlue family) | 8.8 | 93% | KEVRansomwarePoC ×5 | KEV |
| CVE-2019-0703 | Windows SMB Server Information Disclosure Vulnerability (CVE-2019-0703) | 6.5 | 9% | KEV | KEV |
From the original article
4 min read at securityaffairs.com
China-linked APT group tracked as APT3 was using a tool attributed to the NSA-linked Equation Group more than one year prior to Shadow Brokers leak.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.