Malwarecritical

T9000: Advanced Modular Backdoor Uses Complex Anti

Palo Alto Unit 42by Jen Miller-OsbornNov 1, 2018 · 10:04 UTC (Nov 1, 2018)14 min read3 · 2 reads

Read at unit42.paloaltonetworks.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2012-1856 CVE-2015-1641

Tags: cve-2012-1856 cve-2015-1641 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2012-1856	Remote Code Execution via TabStrip ActiveX Control in Microsoft Office (MSCOMCTL.OCX)	—	72%	KEV	— KEV Mar 3, 2022
CVE-2015-1641	Memory Corruption RCE in Microsoft Office via Malicious RTF Files	—	97%	KEV	— KEV Nov 3, 2021

From the original article

14 min read at unit42.paloaltonetworks.com

Most custom backdoors used by advanced attackers have limited functionality. They evade detection by keeping their code simple and flying under the radar. But during a recent investigation we found a backdoor that takes a very different approach.

Palo Alto Unit 42

By Jen Miller-Osborn · unit42.paloaltonetworks.com

Read the full article at Palo Alto Unit 42

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.