Vulnerabilityhigh
North Korea-linked Dark Hotel APT leverages CVE-2018
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-8174 | Out-of-Bounds Write RCE in Microsoft Windows VBScript Engine | 7.5 | 88% | KEVRansomwarePoC ×2 | KEV |
| CVE-2018-8373 | Memory Corruption RCE in Microsoft Internet Explorer Scripting Engine | 7.5 | 62% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | windows-updater.net | ro coding through the big data analysis association: http://windows-updater[.]net/realmuto/wood[.]php?who=1?????? Associated homologous 0da |
From the original article
2 min read at securityaffairs.com
The North Korea-linked Dark Hotel APT group is leveraging the recently patched CVE-2018-8373 vulnerability in the VBScript engine in attacks in the wild. The vulnerability affects Internet Explorer 9, 10 and 11, it was first disclosed last month by Trend Micro and affected all supported versions of Windows.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.