Ransomwarehigh
Not everything has to be a massive, global cyber attack
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-2193 | A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting speculative execution (related to Spectre V1) has been… | 5.7 | 1% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 2915b3f8b703eb744fc54c81f4a9c67f | d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 MD5: 2915b3f8b703eb744fc54c81f4a9c67f Typical Filename: VID001.exe Claimed Product: N/A Detection |
| md5 | 49ae44d48c8ff0ee1b23a310cb2ecf5a | 68c559f85db7bf7ccfe3f81e2c7dfc98a304b2056f1a7c053594fe MD5: 49ae44d48c8ff0ee1b23a310cb2ecf5a Typical Filename: nYzVlQyRnQmDcXk Claimed Product: N/A Dete |
| md5 | 7bdbd180c081fa63ca94f9c22c457376 | 83227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91 MD5: 7bdbd180c081fa63ca94f9c22c457376 Typical Filename: c0dwjdi6a.dll Claimed Product: N/A Detect |
| md5 | 93fefc3e88ffb78abb36365fa5cf857c | 81591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wextract Claimed Product: Internet Explor |
| md5 | c16df0bfc6fda86dbfa8948a566d32c1 | 49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3 MD5: c16df0bfc6fda86dbfa8948a566d32c1 Typical Filename: CEPlus.docm Claimed Product: N/A Detectio |
| sha256 | 24283c2eda68c559f85db7bf7ccfe3f81e2c7dfc98a304b2056f1a7c053594fe | uct: N/A Detection Name: Trojan.GenericKD.33515991 SHA 256: 24283c2eda68c559f85db7bf7ccfe3f81e2c7dfc98a304b2056f1a7c053594fe MD5: 49ae44d48c8ff0ee1b23a310cb2ecf5a Typical Filename: nYz |
| sha256 | 9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 | ion Name: Doc.Downloader.Pwshell::mash.sr.sbx.vioc SHA 256: 9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 MD5: 2915b3f8b703eb744fc54c81f4a9c67f Typical Filename: VID |
| sha256 | a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91 | ware files from Talos telemetry over the past week SHA 256: a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91 MD5: 7bdbd180c081fa63ca94f9c22c457376 Typical Filename: c0d |
| sha256 | e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3 | Product: N/A Detection Name: Win.Dropper.Scar::tpd SHA 256: e38c53aedf49017c47725e4912fc7560e1c8ece2633c05057b22fd4a8ed28eb3 MD5: c16df0bfc6fda86dbfa8948a566d32c1 Typical Filename: CEP |
| sha256 | e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 | duct: N/A Detection Name: Win.Worm.Coinminer::1201 SHA 256: e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wex |
From the original article
8 min read at blog.talosintelligence.com
Some of my Webex rooms recently have been blowing up with memes about blaming Canada or wild speculation that a state-sponsored actor is carrying out some sort of major campaign. After a widespread outage of cellular service with AT&T and other carriers a few weeks ago, people were sure it was some sort of coordinated attack to disrupt Americans’ services that largely power our day-to-day lives.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.