Malwarehigh

Necro Python Malware Upgrades With New Exploits and Crypto Mining Capabilities

The Hacker Newsby @TheHackersNewsJun 3, 2021 · 17:01 UTC (Jun 3, 2021)2 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-21972 CVE-2017-0144 CVE-2017-0145

Tags: cve-2021-21972 cve-2017-0144 cve-2017-0145 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-0144 +1 related CVE CVE-2017-0145	Remote Code Execution in Microsoft SMBv1 (EternalBlue) affecting Windows and Siemens devices	8.8	99%	KEVRansomwarePoC ×6	Mar 17, 2017 KEV Feb 10, 2022
CVE-2021-21972	Unauthenticated RCE in VMware vCenter Server vSphere Client Plugin	9.8	100%	KEVRansomwarePoC ×3	Feb 24, 2021 KEV Nov 3, 2021

From the original article

2 min read at thehackernews.com

New upgrades have been made to a Python-based "self-replicating, polymorphic bot" called Necro in what's seen as an attempt to improve its chances of infecting vulnerable systems and evading detection.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.