Skip to content
NewA calmer, faster ZeroHour
RansomwarecriticalExploited in the wild

We all just need to agree that ad blockers are good

Cisco Talos ()6 min read2 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-20592
Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back…
6.51%
CVE-2023-23583
Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation…
7.82%
CVE-2023-36036
+1 related CVE
Local Privilege Escalation in Microsoft Windows Cloud Files Mini Filter Driver
7.817%KEV
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
md5200206279107f4a2bb1832e3fcd7d64c8a912d4322b45ea64d69bb3add4d818fd1eb7723260b11d76a138a MD5: 200206279107f4a2bb1832e3fcd7d64c Typical Filename: lsgkozfm.bat Claimed Product: N/A Detecti
md53b100bdcd61bb1da816cd7eaf9ef13baec61e6b022a275d66312b5b676f9a0a9537a7708de9aa8ce34de59 MD5: 3b100bdcd61bb1da816cd7eaf9ef13ba Typical Filename: vt-upload-C6In1 Claimed Product: N/A Dete
md54c648967aeac81b18b53a3cb357120f4e2b891fa9c2dad1f63a9b26901d825dc6d6b9dcc6258a985f4f9ab MD5: 4c648967aeac81b18b53a3cb357120f4 Typical Filename: yypnexwqivdpvdeakbmmd.exe Claimed Product
md57bdbd180c081fa63ca94f9c22c45737683227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91 MD5: 7bdbd180c081fa63ca94f9c22c457376 Typical Filename: c0dwjdi6a.dll Claimed Product: N/A Detect
md5bbcf7a68f4164a9f5f5cb2d9f30d979039a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647 MD5: bbcf7a68f4164a9f5f5cb2d9f30d9790 Typical Filename: bbcf7a68f4164a9f5f5cb2d9f30d9790.vir Clai
sha2560e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647ware files from Talos telemetry over the past week SHA 256: 0e2263d4f239a5c39960ffa6b6b688faa7fc3075e130fe0d4599d5b95ef20647 MD5: bbcf7a68f4164a9f5f5cb2d9f30d9790 Typical Filename: bbc
sha2561fa0222e5ae2b891fa9c2dad1f63a9b26901d825dc6d6b9dcc6258a985f4f9abd Product: N/A Detection Name: Backdoor:KillAV-tpd SHA 256: 1fa0222e5ae2b891fa9c2dad1f63a9b26901d825dc6d6b9dcc6258a985f4f9ab MD5: 4c648967aeac81b18b53a3cb357120f4 Typical Filename: yyp
sha256a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91roduct: N/A Detection Name: Win.Dropper.Scar::1201 SHA 256: a31f222fc283227f5e7988d1ad9c0aecd66d58bb7b4d8518ae23e110308dbf91 MD5: 7bdbd180c081fa63ca94f9c22c457376 Typical Filename: c0d
sha256b9ddbd1a4cec61e6b022a275d66312b5b676f9a0a9537a7708de9aa8ce34de59roduct: N/A Detection Name: Win.Dropper.Scar::1201 SHA 256: b9ddbd1a4cec61e6b022a275d66312b5b676f9a0a9537a7708de9aa8ce34de59 MD5: 3b100bdcd61bb1da816cd7eaf9ef13ba Typical Filename: vt-
sha256bea312ccbc8a912d4322b45ea64d69bb3add4d818fd1eb7723260b11d76a138auct: N/A Detection Name: Trojan.GenericKD.33515991 SHA 256: bea312ccbc8a912d4322b45ea64d69bb3add4d818fd1eb7723260b11d76a138a MD5: 200206279107f4a2bb1832e3fcd7d64c Typical Filename: lsg

From the original article

6 min read at blog.talosintelligence.com

I don’t think this is a particularly bold take — but I’m not afraid to say that ad blockers are good! Ever since I started using one sometime in 2016, my experience of using the internet has improved exponentially. I can finally easily find a recipe for dinner on a random influencer’s blog, get a faster answer to “how to replace my car’s headlights” and likely avoid hundreds of pieces of malvertising .

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.