Malwarecritical
RIG Exploit Kit Now Infects Victims' PCs With Dridex Instead of Raccoon Stealer
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-8174 | Out-of-Bounds Write RCE in Microsoft Windows VBScript Engine | 7.5 | 88% | KEVRansomwarePoC ×2 | KEV |
| CVE-2019-0752 | Type Confusion RCE in Microsoft Internet Explorer Scripting Engine | 7.5 | 82% | KEVRansomwarePoC | KEV |
| CVE-2021-26411 | Use-After-Free Memory Corruption in Microsoft Internet Explorer Exploited in the Wild | 8.8 | 82% | KEVRansomware | KEV |
From the original article
1 min read at thehackernews.com
The operators behind the Rig Exploit Kit have swapped the Raccoon Stealer malware for the Dridex financial trojan as part of an ongoing campaign that commenced in January 2022.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.