Skip to content
NewA calmer, faster ZeroHour
RansomwarecriticalExploited in the wild

Threat Source newsletter (July 21, 2022) — No topic is safe from being targeted by fake news and disinformation

Cisco Talos ()6 min read2 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-22047
Local Privilege Escalation in Windows CSRSS Affects Nearly All Windows Versions
7.819%KEV
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
md52915b3f8b703eb744fc54c81f4a9c67fd393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 MD5: 2915b3f8b703eb744fc54c81f4a9c67f Typical Filename: VID001.exe Claimed Product: N/A Detection
md52c8ea737a232fd03ab80db672d50a17a5689bb2a5dcad6fa2644847156dec8b533ee8a3653b432f8fd5645 MD5: 2c8ea737a232fd03ab80db672d50a17a Typical Filename: LwssPlayer.scr Claimed Product: 梦想之巅幻灯播放器
md55741eadfc89a1352c61f1ff0a5c01c06bc3c9d440480002c3f1d2f2977a7f860f35260edda8a26406ca1c3 MD5: 5741eadfc89a1352c61f1ff0a5c01c06 Typical Filename: 3.exe Claimed Product: N/A Detection Name
md593fefc3e88ffb78abb36365fa5cf857c81591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wextract Claimed Product: Internet Explor
md5a087b2e6ec57b08c0d0750c60f96a74ce7e4da97a0ff8e1a0d4840c882569d47b8fab8fb187ac2b475636c MD5: a087b2e6ec57b08c0d0750c60f96a74c Typical Filename: AAct.exe Claimed Product: N/A Detection N
sha256125e12c8045689bb2a5dcad6fa2644847156dec8b533ee8a3653b432f8fd5645med Product: N/A Detection Name: W32.DFC.MalParent SHA 256: 125e12c8045689bb2a5dcad6fa2644847156dec8b533ee8a3653b432f8fd5645 MD5: 2c8ea737a232fd03ab80db672d50a17a Typical Filename: Lws
sha2569f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507ware files from Talos telemetry over the past week SHA 256: 9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 MD5: 2915b3f8b703eb744fc54c81f4a9c67f Typical Filename: VID
sha256e12b6641d7e7e4da97a0ff8e1a0d4840c882569d47b8fab8fb187ac2b475636cion Name: PUA.Win.Trojan.Generic::85.lp.ret.sbx.tg SHA 256: e12b6641d7e7e4da97a0ff8e1a0d4840c882569d47b8fab8fb187ac2b475636c MD5: a087b2e6ec57b08c0d0750c60f96a74c Typical Filename: AAc
sha256e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934duct: N/A Detection Name: Win.Worm.Coinminer::1201 SHA 256: e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wex
sha256ea500d77aabc3c9d440480002c3f1d2f2977a7f860f35260edda8a26406ca1c3ct: N/A Detection Name: PUA.Win.Tool.Kmsauto::1201 SHA 256: ea500d77aabc3c9d440480002c3f1d2f2977a7f860f35260edda8a26406ca1c3 MD5: 5741eadfc89a1352c61f1ff0a5c01c06 Typical Filename: 3.e

From the original article

6 min read at blog.talosintelligence.com

Welcome to this week’s edition of the Threat Source newsletter. I could spend time in this newsletter every week talking about fake news. There are always so many ridiculous memes, headlines, misleading stories, viral Facebook posts and manipulated media that I see come across my Instagram feed or via my wife when she shows me TikToks she favorited.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.