Threat Source Newsletter (Dec. 16, 2021)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-4102 | Use-After-Free Zero-Day in Google Chrome's V8 JavaScript Engine | 8.8 | 8% | KEV | KEV |
| CVE-2021-43215 | iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution | 9.8 | 3% | ||
| CVE-2021-44228 | JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell) | 10.0 | 100% | KEVRansomwarePoC ×9 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | 6ea750c9d69b7db6532d90ac0960e212 | f8ea3090c2460a5f7d92a5a49e7fa040bf26659ec2f7c442dda762 MD5: 6ea750c9d69b7db6532d90ac0960e212 VirusTotal: Typical Filename: deps.zip Claimed Product: N/A |
| md5 | a5e345518e6817f72c9b409915741689 | bb4579feb56748082a32239a433cea619c09f827fd6df805707f37 MD5: a5e345518e6817f72c9b409915741689 Typical Filename: swupdater.exe Claimed Product: Wavesor SW |
| md5 | a6a7eb61172f8d988e47322ebf27bf6d | da90f37b821e4803912c5b351fda417bbf0a9c768b715c6d492e13 MD5: a6a7eb61172f8d988e47322ebf27bf6d Typical Filename: wx.exe Claimed Product: N/A Detection Nam |
| md5 | ee30d6928c9de84049aa055417cc767e | 0436fddc99679a74a26fdcd9851eb00e88ff2998f001ccd0c9016f MD5: ee30d6928c9de84049aa055417cc767e Typical Filename: app.exe Claimed Product: N/A Detection Na |
| md5 | ee62e8f42ed70e717b2571c372e9de9a | 2f3bade35e03b6b0554a80b1563f2c167d9064263845653d912ec6 MD5: ee62e8f42ed70e717b2571c372e9de9a Typical Filename: lHe Claimed Product: N/A Detection Name: |
| sha256 | 0ab024b0da0436fddc99679a74a26fdcd9851eb00e88ff2998f001ccd0c9016f | 5 and 58636 Most prevalent malware files this week SHA 256: 0ab024b0da0436fddc99679a74a26fdcd9851eb00e88ff2998f001ccd0c9016f MD5: ee30d6928c9de84049aa055417cc767e Typical Filename: app |
| sha256 | 1487f122c92f3bade35e03b6b0554a80b1563f2c167d9064263845653d912ec6 | Detection Name: Auto.E5044D5AC2.242358.in07.Talos SHA 256: 1487f122c92f3bade35e03b6b0554a80b1563f2c167d9064263845653d912ec6 MD5: ee62e8f42ed70e717b2571c372e9de9a Typical Filename: lHe |
| sha256 | 1b259d8ca9bb4579feb56748082a32239a433cea619c09f827fd6df805707f37 | N/A Detection Name: Win.Dropper.Wingo::in07.talos SHA 256: 1b259d8ca9bb4579feb56748082a32239a433cea619c09f827fd6df805707f37 MD5: a5e345518e6817f72c9b409915741689 Typical Filename: swu |
| sha256 | 5bab2ae1cada90f37b821e4803912c5b351fda417bbf0a9c768b715c6d492e13 | Glupteba::gravity::W32.Auto:0ab024b0da.in03.Talos SHA 256: 5bab2ae1cada90f37b821e4803912c5b351fda417bbf0a9c768b715c6d492e13 MD5: a6a7eb61172f8d988e47322ebf27bf6d Typical Filename: wx. |
| sha256 | e5044d5ac2f8ea3090c2460a5f7d92a5a49e7fa040bf26659ec2f7c442dda762 | r Detection Name: W32.1B259D8CA9.Wavesor.SSO.Talos SHA 256: e5044d5ac2f8ea3090c2460a5f7d92a5a49e7fa040bf26659ec2f7c442dda762 MD5: 6ea750c9d69b7db6532d90ac0960e212 VirusTotal: Typical F |
From the original article
4 min read at blog.talosintelligence.com
I'm just going to cut to the chase since I know all anyone wants to read about is Log4J. For the latest Talos research, continually check back on our blog post here . Above is the live stream we recorded Monday morning updating everyone on the situation, but of course, a lot has already changed since then.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.