Running for Office: Russian APT Toolkits Revealed
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2013-3897 | Use-After-Free RCE in Microsoft Internet Explorer (CVE-2013-3897) | — | 77% | KEV | — KEV |
From the original article
6 min read at recordedfuture.com
Russian APTs regularly target Microsoft products with 55% of exploited vulnerabilities targeting versions of Office, Windows, and Internet Explorer products. Targeting widely adopted software provides the path of least resistance for a state-sponsored actor. Microsoft Office vulnerability targeting is in line with heavy use of spear phishing by Russian actors including APT28.
By RFSID · recordedfuture.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.