Vulnerabilityhigh
Threat Source Newsletter (Dec. 9, 2021)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-44515 | Authentication Bypass Leading to RCE in Zoho ManageEngine Desktop Central | 9.8 | 100% | KEVPoC | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 6ea750c9d69b7db6532d90ac0960e212 | f8ea3090c2460a5f7d92a5a49e7fa040bf26659ec2f7c442dda762 MD5: 6ea750c9d69b7db6532d90ac0960e212 VirusTotal: Typical Filename: deps.zip Claimed Product: N/A |
| md5 | a5e345518e6817f72c9b409915741689 | bb4579feb56748082a32239a433cea619c09f827fd6df805707f37 MD5: a5e345518e6817f72c9b409915741689 Typical Filename: swupdater.exe Claimed Product: Wavesor SW |
| md5 | a6a7eb61172f8d988e47322ebf27bf6d | da90f37b821e4803912c5b351fda417bbf0a9c768b715c6d492e13 MD5: a6a7eb61172f8d988e47322ebf27bf6d Typical Filename: wx.exe Claimed Product: N/A Detection Nam |
| md5 | ee30d6928c9de84049aa055417cc767e | 0436fddc99679a74a26fdcd9851eb00e88ff2998f001ccd0c9016f MD5: ee30d6928c9de84049aa055417cc767e Typical Filename: app.exe Claimed Product: N/A Detection Na |
| md5 | ee62e8f42ed70e717b2571c372e9de9a | 2f3bade35e03b6b0554a80b1563f2c167d9064263845653d912ec6 MD5: ee62e8f42ed70e717b2571c372e9de9a Typical Filename: lHe Claimed Product: N/A Detection Name: |
| sha256 | 0ab024b0da0436fddc99679a74a26fdcd9851eb00e88ff2998f001ccd0c9016f | SID: 58703 Most prevalent malware files this week SHA 256: 0ab024b0da0436fddc99679a74a26fdcd9851eb00e88ff2998f001ccd0c9016f MD5: ee30d6928c9de84049aa055417cc767e Typical Filename: app |
| sha256 | 1487f122c92f3bade35e03b6b0554a80b1563f2c167d9064263845653d912ec6 | Detection Name: Auto.E5044D5AC2.242358.in07.Talos SHA 256: 1487f122c92f3bade35e03b6b0554a80b1563f2c167d9064263845653d912ec6 MD5: ee62e8f42ed70e717b2571c372e9de9a Typical Filename: lHe |
| sha256 | 1b259d8ca9bb4579feb56748082a32239a433cea619c09f827fd6df805707f37 | N/A Detection Name: Win.Dropper.Wingo::in07.talos SHA 256: 1b259d8ca9bb4579feb56748082a32239a433cea619c09f827fd6df805707f37 MD5: a5e345518e6817f72c9b409915741689 Typical Filename: swu |
| sha256 | 5bab2ae1cada90f37b821e4803912c5b351fda417bbf0a9c768b715c6d492e13 | Glupteba::gravity::W32.Auto:0ab024b0da.in03.Talos SHA 256: 5bab2ae1cada90f37b821e4803912c5b351fda417bbf0a9c768b715c6d492e13 MD5: a6a7eb61172f8d988e47322ebf27bf6d Typical Filename: wx. |
| sha256 | e5044d5ac2f8ea3090c2460a5f7d92a5a49e7fa040bf26659ec2f7c442dda762 | r Detection Name: W32.1B259D8CA9.Wavesor.SSO.Talos SHA 256: e5044d5ac2f8ea3090c2460a5f7d92a5a49e7fa040bf26659ec2f7c442dda762 MD5: 6ea750c9d69b7db6532d90ac0960e212 VirusTotal: Typical F |
From the original article
4 min read at blog.talosintelligence.com
The good news keeps rolling in for our Incident Response team, who received another accolade by being featured in Forrester's recent quarterly report on the incident readiness industry. This comes on the heels of the team also being named a leader in IR services in an IDC MarketScape report .
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.