Vulnerabilitymedium

Neptune exploit kit used to deliver Monero cryptocurrency miners

Security Affairsby @securityaffairsAug 23, 2017 · 08:10 UTC (Aug 23, 2017)2 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2016-0189 CVE-2015-2419 CVE-2014-6332 CVE-2015-8651 CVE-2015-7645

Tags: cve-2016-0189 cve-2015-2419 cve-2014-6332 cve-2015-8651 cve-2015-7645 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2014-6332	Remote Code Execution via Array Bounds Flaw in Microsoft Windows OLE Automation	—	95%	KEV	— KEV Mar 25, 2022
CVE-2015-2419	Memory Corruption RCE in Microsoft Internet Explorer JScript Engine	—	53%	KEV	— KEV Mar 28, 2022
CVE-2015-7645	Arbitrary Code Execution in Adobe Flash Player via Crafted SWF Files	—	65%	KEVRansomware	— KEV Mar 3, 2022
CVE-2015-8651	Integer Overflow in Adobe Flash Player Enables Remote Code Execution	—	68%	KEV	— KEV May 25, 2022
CVE-2016-0189	Memory Corruption RCE in Microsoft IE Scripting Engines (JScript/VBScript)	7.5	94%	KEVRansomwarePoC	May 11, 2016 KEV Mar 28, 2022

From the original article

2 min read at securityaffairs.com

According to a new report published by FireEye, crooks have been using the Neptune exploit kit to deliver cryptocurrency miners via malvertising campaigns. According to experts at FireEye, crooks are exploiting the Neptune exploit kit (aka Terror EK , Eris, and Blaze) to delivery cryptocurrency miners via malvertising campaigns .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.