Vulnerabilityhigh

The Icefog APT: A Tale of Cloak and Three Daggers

Kaspersky Securelistby @SecurelistSep 25, 2013 · 22:55 UTC (Sep 25, 2013)3 min read2

Read at securelist.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2012-0158 CVE-2012-1856 CVE-2013-0422 CVE-2012-1723

Tags: cve-2012-0158 cve-2012-1856 cve-2013-0422 cve-2012-1723 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2012-0158	Remote Code Execution in Microsoft MSCOMCTL.OCX (Windows Common Controls)	—	100%	KEVRansomware	— KEV Nov 3, 2021
CVE-2012-1723	Remote Arbitrary Code Execution in Oracle Java SE (Hotspot Component)	—	94%	KEVRansomware	— KEV Mar 3, 2022
CVE-2012-1856	Remote Code Execution via TabStrip ActiveX Control in Microsoft Office (MSCOMCTL.OCX)	—	72%	KEV	— KEV Mar 3, 2022
CVE-2013-0422	Java Applet Permission-Restriction Flaw Enables Remote Code Execution in Oracle JRE	—	97%	KEVRansomware	— KEV May 25, 2022

From the original article

3 min read at securelist.com

The emergence of small groups of cyber-mercenaries available for hire to perform surgical hit and run operations. The world of Advanced Persistent Threats (APTs) is well known. Skilled adversaries compromising high-profile victims and stealthily exfiltrating valuable data over the course of many years.

Kaspersky Securelist

By @Securelist · securelist.com

Read the full article at Kaspersky Securelist

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.