Exploit / PoCcritical
CVE-2019-11707 Firefox Zero-Day exploited to infect cryptocurrency exchanges
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2019-11707 | Type Confusion in Mozilla Firefox and Thunderbird JavaScript Engine | 8.8 | 38% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| sha1 | 23017a55b3d25a2597b7148214fd8fb2372591a5 | dge. “Note that the hash mentioned by Phil [Philip Martin], 23017a55b3d25a2597b7148214fd8fb2372591a5 matches malicious file which the user sent me.” wrote Wardl |
From the original article
3 min read at securityaffairs.com
Researchers discovered that recently patched Firefox zero-day (CVE-2019-11707) has been exploited to deliver Windows and Mac malware to cryptocurrency exchanges. Experts discovered that recently patched Firefox zero-day vulnerability ( CVE-2019-11707 ) has been exploited by threat actors to deliver Windows and Mac malware to employees of cryptocurrency exchanges.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.