Malwarecritical

China-linked TA413 targets Tibetan entities with new backdoor

Security Affairsby @securityaffairsSep 26, 2022 · 14:58 UTC (Sep 26, 2022)2 min read1

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-1040 CVE-2022-30190

Tags: cve-2022-1040 cve-2022-30190 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-1040	Authentication Bypass Leading to Unauthenticated RCE in Sophos Firewall (SFOS)	9.8	100%	KEVPoC ×2	Mar 25, 2022 KEV Mar 31, 2022
CVE-2022-30190	MSDT URL Protocol Remote Code Execution in Microsoft Windows (Follina)	7.8	99%	KEVRansomwarePoC	Jun 1, 2022 KEV Jun 14, 2022

From the original article

2 min read at securityaffairs.com

China-linked cyberespionage group TA413 exploits employ a never-before-undetected backdoor called LOWZERO in attacks aimed at Tibetan entities.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.