Threat actorcritical
Kaspersky Lab discovered the cyber espionage campaign "Red October"
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2009-3129 | CVE-2009-3129: Memory Corruption RCE in Microsoft Excel via FEATHEADER Record | — | 84% | KEV | — KEV |
| CVE-2010-3333 | Stack Buffer Overflow in Microsoft Office RTF Parsing Allows Remote Code Execution | — | 89% | KEV | — KEV |
| CVE-2012-0158 | Remote Code Execution in Microsoft MSCOMCTL.OCX (Windows Common Controls) | — | 100% | KEVRansomware | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 178.63.208.49 | ound matching IP blocks for five of them: Malicious servers 178.63.208.49 matches to 178.63. 188.40.19.247 matches to 188.40. 78.46.1 |
| ipv4 | 188.40.19.247 | of them: Malicious servers 178.63.208.49 matches to 178.63. 188.40.19.247 matches to 188.40. 78.46.173.15 matches to 78.46. 88.198.30 |
| ipv4 | 78.46.173.15 | .208.49 matches to 178.63. 188.40.19.247 matches to 188.40. 78.46.173.15 matches to 78.46. 88.198.30.44 matches to 88.198. Mini-moth |
| ipv4 | 88.198.30.44 | 40.19.247 matches to 188.40. 78.46.173.15 matches to 78.46. 88.198.30.44 matches to 88.198. Mini-motherships 91.226.31.40 matches to |
| ipv4 | 91.226.31.40 | to 78.46. 88.198.30.44 matches to 88.198. Mini-motherships 91.226.31.40 matches to 91.226. It has been my belief for many years tha |
From the original article
5 min read at securityaffairs.com
Last October Kaspersky Lab’s Global Research & Analysis Team started a new investigation after several attacks hit computer networks of various international diplomatic service agencies. The attacks appeared very suspect, a new large scale cyber-espionage operation has been discovered, the operation is dubbed «Red October», a name inspired by famous novel «The Hunt For The Red October» (ROCRA).
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.