RansomwarecriticalExploited in the wild

PrintNightmare vulnerability weaponized by Magniber ransomware gang

The RecordDec 13, 2022 · 00:00 UTC (Dec 13, 2022)2 min read1 · 1 read

Read at therecord.media

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-34527 CVE-2021-1675

Tags: cve-2021-34527 cve-2021-1675 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-1675	Remote Code Execution in Microsoft Windows Print Spooler (PrintNightmare)	7.8	85%	KEVRansomwarePoC	Jun 8, 2021 KEV Nov 3, 2021
CVE-2021-34527	PrintNightmare: Remote Code Execution in Microsoft Windows Print Spooler	8.8	100%	KEVRansomwarePoC ×3	Jul 2, 2021 KEV Nov 3, 2021

From the original article

2 min read at therecord.media

The operators of the Magniber ransomware have weaponized the infamous PrintNightmare vulnerability and are now attempting to breach Windows systems in South Korea. In a report published today by security firm CrowdStrike, the company said the attacks have been taking place since at least July 13.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.