Malwarecritical

Void Banshee APT Exploits Microsoft MHTML Flaw to Spread Atlantida Stealer

The Hacker Newsby @TheHackersNewsJul 21, 2024 · 08:04 UTC (Jul 21, 2024)3 min read2

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-38112 CVE-2021-40444 CVE-2024-27198

Tags: cve-2024-38112 cve-2021-40444 cve-2024-27198 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-40444	Remote Code Execution via MSHTML Rendering Engine in Microsoft Windows/Office (CVE-2021-40444)	8.8	98%	KEVRansomwarePoC ×2	Sep 15, 2021 KEV Nov 3, 2021
CVE-2024-27198	Authentication Bypass in JetBrains TeamCity CI/CD Server	9.8	100%	KEVRansomware	Mar 4, 2024 KEV Mar 7, 2024
CVE-2024-38112	Windows MSHTML Platform Spoofing Vulnerability Exploited in the Wild (CVE-2024-38112)	7.5	84%	KEV	Jul 9, 2024 KEV Jul 9, 2024

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Jul 16, 2024 Data Security / Vulnerability An advanced persistent threat (APT) group called Void Banshee has been observed exploiting a recently disclosed security flaw in the Microsoft MHTML browser engine as a zero-day to deliver an information stealer called Atlantida .

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.