Skip to content
NewA calmer, faster ZeroHour

New Version of OSX.SabPub & Confirmed Mac APT attacks

Kaspersky Securelistby @Securelist ()4 min read2
Analyze CVE-2009-0563 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2009-0563
Buffer Overflow RCE in Microsoft Office via Crafted Word Document
—60%KEV—
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
md540c8786a4887a763d8f3e5243724d1c9an analysis of the same and traced its origin by the MD5 ( 40C8786A4887A763D8F3E5243724D1C9 ). The results were fascinating: The sample was uploaded to

From the original article

4 min read at securelist.com

Late last week, we found evidence of a possible link between a Mac OS X backdoor trojan and an APT attack known as LuckyCat . The IP address of the C&C to which this bot connects (199. 192.

Kaspersky Securelist

By @Securelist · securelist.com

Read the full article at Kaspersky Securelist

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.