Malwarecritical

Israeli surveillance firm Candiru used Windows 0days to deploy spyware

Security Affairsby @securityaffairsJul 15, 2021 · 21:23 UTC (Jul 15, 2021)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-31979 CVE-2021-33771

Tags: cve-2021-31979 cve-2021-33771 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-33771 +1 related CVE CVE-2021-31979	Privilege Escalation in Microsoft Windows Kernel Exploited in the Wild (CVE-2021-33771)	7.8	10%	KEV	Jul 14, 2021 KEV Nov 3, 2021

From the original article

2 min read at securityaffairs.com

Experts said that Israeli surveillance firm Candiru, tracked as Sourgum, exploited zero-days to deliver a new Windows spyware. Microsoft and Citizen Lab believe that the secretive Israel-based Israeli surveillance firm Candiru, tracked as Sourgum, used Windows zero-day exploits to deliver a new Windows spyware dubbed DevilsTongue.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.