Skip to content
NewA calmer, faster ZeroHour

Dorifel is much bigger than expected and it’s still active and growing!

Kaspersky Securelistby @Securelist ()5 min read3 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2012-0507
Type Confusion RCE in Oracle Java SE Concurrency Component
—98%KEVRansomware—
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
ipv4184.22.103.202ock access t othe following IP addresses 184.82.162.163 and 184.22.103.202 . If you see network traffic to these addresses it might be
ipv4184.82.162.163commend that you block access t othe following IP addresses 184.82.162.163 and 184.22.103.202 . If you see network traffic to these ad

From the original article

5 min read at securelist.com

Yesterday it was a dark day for many companies in Europe, but especially in the Netherlands. A piece of malware known as Worm. Win32.

Kaspersky Securelist

By @Securelist · securelist.com

Read the full article at Kaspersky Securelist

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.