Vulnerabilitymedium

Fileless PowerGhost cryptocurrency miner leverages EternalBlue exploit to spread

Security Affairsby @securityaffairsJul 31, 2018 · 05:40 UTC (Jul 31, 2018)2 min read2

Read at securityaffairs.com

Analyze CVE-2017-0144 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2017-0144 CVE-2018-8120

Tags: cve-2017-0144 cve-2018-8120 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-0144	Remote Code Execution in Microsoft SMBv1 (EternalBlue) affecting Windows and Siemens devices	8.8	99%	KEVRansomwarePoC ×6	Mar 17, 2017 KEV Feb 10, 2022
CVE-2018-8120	Local Privilege Escalation in Microsoft Win32k (Windows 7 / Server 2008)	7.0	73%	KEVRansomwarePoC	May 9, 2018 KEV Mar 15, 2022

From the original article

2 min read at securityaffairs.com

Security experts from Kaspersky Lab have spotted a new cryptocurrency miner dubbed PowerGhost that can spread leveraging a fileless infection technique. The PowerGhost miner targets large corporate networks, infecting both workstations and servers, it employing multiple fileless techniques to evade detection.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.