Threat Source newsletter (July 7, 2022) — Teamwork makes the dream work
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-2294 | Heap Buffer Overflow in Google Chrome WebRTC Exploited in the Wild | 8.8 | 71% | KEVRansomware | KEV |
| CVE-2022-2295 | Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page | 8.8 | 1% |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 10f1561457242973e0fed724eec92f8c | 1e870cdeb0e648a6b305a41452c405cca21124de26b54f79d55ad0 MD5: 10f1561457242973e0fed724eec92f8c Typical Filename: ntuser.vbe Claimed Product: N/A Detection |
| md5 | 2915b3f8b703eb744fc54c81f4a9c67f | d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 MD5: 2915b3f8b703eb744fc54c81f4a9c67f Typical Filename: VID001.exe Claimed Product: N/A Detection |
| md5 | 2c8ea737a232fd03ab80db672d50a17a | 5689bb2a5dcad6fa2644847156dec8b533ee8a3653b432f8fd5645 MD5: 2c8ea737a232fd03ab80db672d50a17a Typical Filename: LwssPlayer.scr Claimed Product: 梦想之巅幻灯播放器 |
| md5 | 93fefc3e88ffb78abb36365fa5cf857c | 81591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wextract Claimed Product: Internet Explor |
| md5 | a7742a6d7d8b39f1a8cdf7f0b50f12bb | 7c8fdd899ce9b961516179da4c41be0818b5f07f07e4f4b4ebf28e MD5: a7742a6d7d8b39f1a8cdf7f0b50f12bb Typical Filename: wrsanvs.exe Claimed Product: N/A Detectio |
| sha256 | 125e12c8045689bb2a5dcad6fa2644847156dec8b533ee8a3653b432f8fd5645 | ion Name: PUA.Win.Trojan.Generic::85.lp.ret.sbx.tg SHA 256: 125e12c8045689bb2a5dcad6fa2644847156dec8b533ee8a3653b432f8fd5645 MD5: 2c8ea737a232fd03ab80db672d50a17a Typical Filename: Lws |
| sha256 | 1a234656f81e870cdeb0e648a6b305a41452c405cca21124de26b54f79d55ad0 | 梦想之巅幻灯播放器 Detection Name: Auto.125E12.241442.in02 SHA 256: 1a234656f81e870cdeb0e648a6b305a41452c405cca21124de26b54f79d55ad0 MD5: 10f1561457242973e0fed724eec92f8c Typical Filename: ntu |
| sha256 | 91e994229a7c8fdd899ce9b961516179da4c41be0818b5f07f07e4f4b4ebf28e | Detection Name: Auto.1A234656F8.211848.in07.Talos SHA 256: 91e994229a7c8fdd899ce9b961516179da4c41be0818b5f07f07e4f4b4ebf28e MD5: a7742a6d7d8b39f1a8cdf7f0b50f12bb Typical Filename: wrs |
| sha256 | 9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 | ware files from Talos telemetry over the past week SHA 256: 9f1f11a708d393e0a4109ae189bc64f1f3e312653dcf317a2bd406f18ffcc507 MD5: 2915b3f8b703eb744fc54c81f4a9c67f Typical Filename: VID |
| sha256 | e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 | duct: N/A Detection Name: Win.Worm.Coinminer::1201 SHA 256: e4973db44081591e9bff5117946defbef6041397e56164f485cf8ec57b1d8934 MD5: 93fefc3e88ffb78abb36365fa5cf857c Typical Filename: Wex |
From the original article
5 min read at blog.talosintelligence.com
Welcome to this week’s edition of the Threat Source newsletter. I’ve been thinking a lot recently about the pros and cons of the way we publicize our threat research. I had a few conversations at Cisco Live with people — who are more generally IT-focused than hyper-focused on cybersecurity — about the amount of information we share on our blog and social media profiles.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.