Data breachcritical
It's best to just assume you’ve been involved in a data breach somehow
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-38112 | Windows MSHTML Platform Spoofing Vulnerability Exploited in the Wild (CVE-2024-38112) | 7.5 | 84% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 200206279107f4a2bb1832e3fcd7d64c | 8a912d4322b45ea64d69bb3add4d818fd1eb7723260b11d76a138a MD5: 200206279107f4a2bb1832e3fcd7d64c Typical Filename: lsgkozfm.bat Claimed Product: N/A Detecti |
| md5 | 49ae44d48c8ff0ee1b23a310cb2ecf5a | 68c559f85db7bf7ccfe3f81e2c7dfc98a304b2056f1a7c053594fe MD5: 49ae44d48c8ff0ee1b23a310cb2ecf5a Typical Filename: nYzVlQyRnQmDcXk Claimed Product: N/A Dete |
| md5 | 8c69830a50fb85d8a794fa46643493b2 | 1eaefffd2f2c79b5c26a2648b8d3c19a22cadf35453455ff08ead0 MD5: 8c69830a50fb85d8a794fa46643493b2 Typical Filename: AAct.exe Claimed Product: N/A Detection N |
| md5 | e4acf0e303e9f1371f029e013f902262 | 18d266de57143c2164b31c27dfa73c22e42137f3fe63a21f793202 MD5: e4acf0e303e9f1371f029e013f902262 Typical Filename: FileZilla_3.67.0_win64_sponsored2-setup.e |
| md5 | fd743b55d530e0468805de0e83758fe9 | 02c491748d055287898dd37af96405aeff48c2500b834f6739e72d MD5: fd743b55d530e0468805de0e83758fe9 Typical Filename: KMSAuto Net.exe Claimed Product: KMSAuto |
| sha256 | 161937ed1502c491748d055287898dd37af96405aeff48c2500b834f6739e72d | N/A Detection Name: PUA.Win.Dropper.Generic::1201 SHA 256: 161937ed1502c491748d055287898dd37af96405aeff48c2500b834f6739e72d MD5: fd743b55d530e0468805de0e83758fe9 Typical Filename: KMS |
| sha256 | 24283c2eda68c559f85db7bf7ccfe3f81e2c7dfc98a304b2056f1a7c053594fe | ct: KMSAuto Net Detection Name: W32.File.MalParent SHA 256: 24283c2eda68c559f85db7bf7ccfe3f81e2c7dfc98a304b2056f1a7c053594fe MD5: 49ae44d48c8ff0ee1b23a310cb2ecf5a Typical Filename: nYz |
| sha256 | 9be2103d3418d266de57143c2164b31c27dfa73c22e42137f3fe63a21f793202 | Product: N/A Detection Name: Win.Dropper.Scar::tpd SHA 256: 9be2103d3418d266de57143c2164b31c27dfa73c22e42137f3fe63a21f793202 MD5: e4acf0e303e9f1371f029e013f902262 Typical Filename: Fil |
| sha256 | bea312ccbc8a912d4322b45ea64d69bb3add4d818fd1eb7723260b11d76a138a | Product: N/A Detection Name: Win.Dropper.Scar::tpd SHA 256: bea312ccbc8a912d4322b45ea64d69bb3add4d818fd1eb7723260b11d76a138a MD5: 200206279107f4a2bb1832e3fcd7d64c Typical Filename: lsg |
| sha256 | c67b03c0a91eaefffd2f2c79b5c26a2648b8d3c19a22cadf35453455ff08ead0 | ware files from Talos telemetry over the past week SHA 256: c67b03c0a91eaefffd2f2c79b5c26a2648b8d3c19a22cadf35453455ff08ead0 MD5: 8c69830a50fb85d8a794fa46643493b2 Typical Filename: AAc |
From the original article
7 min read at blog.talosintelligence.com
Between AT&T , all the follow-on activity from Snowflake , Microsoft Outlook , and more, it’s best to probably just assume at this point that your personal information has somehow been involved in a data breach. We’re only halfway through 2024, and we’ve already seen some of the largest data breaches and leaks in history.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.