Malwarecritical
APT-C-60 Group Exploit WPS Office Flaw to Deploy SpyGlace Backdoor
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-7262+1 related CVE | Path Traversal Arbitrary Library Load in Kingsoft WPS Office for Windows | 9.3 | 3% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | cradle.im | nShareOTR has also been uncovered in an app called Cradle ("cradle[.]im") that purports to be an open-source fork of the Signal m |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Aug 28, 2024 Cyber Attack / Vulnerability A South Korea-aligned cyber espionage has been linked to the zero-day exploitation of a now-patched critical remote code execution flaw in Kingsoft WPS Office to deploy a bespoke backdoor dubbed SpyGlace. The activity has been attributed to a threat actor dubbed APT-C-60 , according to cybersecurity firms ESET and DBAPPSecurity.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.