Ransomwarecritical
Rounding up some of the major headlines from RSA
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-30044 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 7.2 | 84% | ||
| CVE-2024-30051 | Elevation of Privilege in Microsoft Windows DWM Core Library (Actively Exploited) | 7.8 | 6% | KEVRansomware | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 22ae85259273bc4ea419584293eda886 | a9655410f61d64de25990972db95d28738fc93bb7a8a69b347a6a6 MD5: 22ae85259273bc4ea419584293eda886 Typical Filename: KMSAuto++ x64.exe Claimed Product: KMSAut |
| md5 | 4c648967aeac81b18b53a3cb357120f4 | e2b891fa9c2dad1f63a9b26901d825dc6d6b9dcc6258a985f4f9ab MD5: 4c648967aeac81b18b53a3cb357120f4 Typical Filename: yypnexwqivdpvdeakbmmd.exe Claimed Product |
| md5 | b4440eea7367c3fb04a89225df4022a6 | 707738adcd7b5a740c5a93534b4b8c9d3b947f6d85740af19d17d0 MD5: b4440eea7367c3fb04a89225df4022a6 Typical Filename: Pdfixers.exe Claimed Product: Pdfixers De |
| md5 | e4acf0e303e9f1371f029e013f902262 | 18d266de57143c2164b31c27dfa73c22e42137f3fe63a21f793202 MD5: e4acf0e303e9f1371f029e013f902262 Typical Filename: FileZilla_3.67.0_win64_sponsored2-setup.e |
| md5 | fb9e0617489f517dc47452e204572b4e | 4e4db3defbaf15fcd216e66b9c999831e0b1f0c82899f7f8ef6ee1 MD5: fb9e0617489f517dc47452e204572b4e Typical Filename: KMSAuto++.exe Claimed Product: KMSAuto++ |
| sha256 | 1fa0222e5ae2b891fa9c2dad1f63a9b26901d825dc6d6b9dcc6258a985f4f9ab | Detection Name: W32.Superfluss:PUPgenPUP.27gq.1201 SHA 256: 1fa0222e5ae2b891fa9c2dad1f63a9b26901d825dc6d6b9dcc6258a985f4f9ab MD5: 4c648967aeac81b18b53a3cb357120f4 Typical Filename: yyp |
| sha256 | 9be2103d3418d266de57143c2164b31c27dfa73c22e42137f3fe63a21f793202 | ware files from Talos telemetry over the past week SHA 256: 9be2103d3418d266de57143c2164b31c27dfa73c22e42137f3fe63a21f793202 MD5: e4acf0e303e9f1371f029e013f902262 Typical Filename: Fil |
| sha256 | a024a18e27707738adcd7b5a740c5a93534b4b8c9d3b947f6d85740af19d17d0 | ileZilla Detection Name: W32.Application.27hg.1201 SHA 256: a024a18e27707738adcd7b5a740c5a93534b4b8c9d3b947f6d85740af19d17d0 MD5: b4440eea7367c3fb04a89225df4022a6 Typical Filename: Pdf |
| sha256 | abaa1b89dca9655410f61d64de25990972db95d28738fc93bb7a8a69b347a6a6 | duct: KMSAuto++ Detection Name: W32.File.MalParent SHA 256: abaa1b89dca9655410f61d64de25990972db95d28738fc93bb7a8a69b347a6a6 MD5: 22ae85259273bc4ea419584293eda886 Typical Filename: KMS |
| sha256 | d529b406724e4db3defbaf15fcd216e66b9c999831e0b1f0c82899f7f8ef6ee1 | roduct: N/A Detection Name: Win.Dropper.Scar::1201 SHA 256: d529b406724e4db3defbaf15fcd216e66b9c999831e0b1f0c82899f7f8ef6ee1 MD5: fb9e0617489f517dc47452e204572b4e Typical Filename: KMS |
From the original article
8 min read at blog.talosintelligence.com
While I one day wish to make it to the RSA Conference in person, I’ve never had the pleasure of making the trek to San Francisco for one of the largest security conferences in the U. S. Instead, I had to watch from afar and catch up on the internet every day like the common folk.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.