Data breachcritical

The Icefog APT: Frequently Asked Questions

Kaspersky Securelistby @SecurelistSep 26, 2013 · 03:03 UTC (Sep 26, 2013)8 min read2

Read at securelist.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2012-1856 CVE-2012-0158 CVE-2013-0422 CVE-2012-1723

Tags: cve-2012-1856 cve-2012-0158 cve-2013-0422 cve-2012-1723 breach

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2012-0158	Remote Code Execution in Microsoft MSCOMCTL.OCX (Windows Common Controls)	—	100%	KEVRansomware	— KEV Nov 3, 2021
CVE-2012-1723	Remote Arbitrary Code Execution in Oracle Java SE (Hotspot Component)	—	94%	KEVRansomware	— KEV Mar 3, 2022
CVE-2012-1856	Remote Code Execution via TabStrip ActiveX Control in Microsoft Office (MSCOMCTL.OCX)	—	72%	KEV	— KEV Mar 3, 2022
CVE-2013-0422	Java Applet Permission-Restriction Flaw Enables Remote Code Execution in Oracle JRE	—	97%	KEVRansomware	— KEV May 25, 2022

From the original article

8 min read at securelist.com

Here are answers to the most frequently asked questions related to Icefog, an APT operation targeting entities in Japan and South Korea. Icefog refers to a cyber-espionage campaign that has been active at least since 2011.

Kaspersky Securelist

By @Securelist · securelist.com

Read the full article at Kaspersky Securelist

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.