Malwarehigh
New ZLoader malware campaign hit +2000 victims across 111 countries
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2013-3900 | Authenticode Signature Verification Flaw in Microsoft WinVerifyTrust (RCE) | 5.5 | 45% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | teamworks455.com | vestigation, the experts found an open directory, hosted at teamworks455[.]com, that was holding some of the files that are downloaded u |
From the original article
2 min read at securityaffairs.com
A malware campaign spreads ZLoader malware by exploiting a Windows vulnerability that was fixed in 2013 but in 2014 Microsoft revised the fix. Experts from Check Point Research uncovered a new ZLoader malware campaign in early November 2021. The malware campaign is still active and threat actors have already stolen data and credentials of more than 2000 victims across 111 countries as of 2 Jan 2022.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.