Exploit / PoCcritical
New Apple Zero-Days Exploited to Target Egyptian ex
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-41993+2 related CVEs | WebKit Code Execution Flaw in Apple iOS, iPadOS, macOS, and Safari | 8.8 group max | 24% | KEV | KEV |
| CVE-2023-4762 | Chromium V8 Type Confusion (CVE-2023-4762) Enables RCE via Crafted Web Pages | 8.8 | 41% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | betly.me | livered after Eltantawy was redirected to a website named c.betly[.]me by means of a sophisticated network injection attack usin |
| domain | sec-flare.com | human rights abuses." The exploit, hosted on a domain named sec-flare[.]com, is said to have been delivered after Eltantawy was redir |
From the original article
4 min read at thehackernews.com
The three zero-day flaws addressed by Apple on September 21, 2023, were leveraged as part of an iPhone exploit chain in an attempt to deliver a spyware strain called Predator targeting former Egyptian member of parliament Ahmed Eltantawy between May and September 2023.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.