Threat actorhigh

APT40 cyberespionage group supporting growth of China’s naval sector

Security Affairsby @securityaffairsMar 6, 2019 · 07:59 UTC (Mar 6, 2019)3 min read3 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2012-0158 CVE-2017-0199 CVE-2017-8759 CVE-2017-11882

Tags: cve-2012-0158 cve-2017-0199 cve-2017-8759 cve-2017-11882 threat-actor

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2012-0158	Remote Code Execution in Microsoft MSCOMCTL.OCX (Windows Common Controls)	—	100%	KEVRansomware	— KEV Nov 3, 2021
CVE-2017-0199	Remote Code Execution in Microsoft Office and WordPad via crafted document files	7.8	99%	KEVRansomwarePoC ×6	Apr 12, 2017 KEV Nov 3, 2021
CVE-2017-11882	Memory Corruption RCE in Microsoft Office via Legacy Equation Editor	7.8	100%	KEVRansomwarePoC ×10	Nov 15, 2017 KEV Nov 3, 2021
CVE-2017-8759	Remote Code Execution in Microsoft .NET Framework via Malicious Documents (CWE-94)	7.8	89%	KEVPoC ×2	Sep 13, 2017 KEV Nov 3, 2021

From the original article

3 min read at securityaffairs.com

A cyber-espionage group, tracked as APT40, apparently linked to the Chinese government is focused on targeting countries important to the country’s Belt and Road Initiative. The cyber-espionage group tracked as APT40 (aka TEMP. Periscope , TEMP.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.