Vulnerabilitycritical
Ukraine Targeted in Cyberattack Exploiting 7-Year
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-8570 | Remote Code Execution in Microsoft Office via Malicious PPSX Files (CVE-2017-8570) | 7.8 | 90% | KEVPoC ×2 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | petapixel.com | art site (weavesilk[.]com) and a popular photography site (petapixel[.]com). These are unrelated, and it's a bit puzzling why an att |
| domain | petapixel.fun | rther instructions from a command-and-control (C2) server ("petapixel[.]fun"). The DLL also packs in features to check if it's being |
| domain | weavesilk.com | ixel[.]fun are disguised as an obscure generative art site (weavesilk[.]com) and a popular photography site (petapixel[.]com). These |
| domain | weavesilk.space | a specially crafted file, to load a remote script hosted on weavesilk[.]space. The heavily obfuscated script subsequently launches an H |
From the original article
3 min read at thehackernews.com
Cybersecurity researchers have discovered a targeted operation against Ukraine that has been found leveraging a nearly seven-year-old flaw in Microsoft Office to deliver Cobalt Strike on compromised systems. The attack chain, which took place at the end of 2023 according to Deep Instinct, employs a PowerPoint slideshow file ("signal-2023-12-20-160512.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.