Ransomwarehigh
IT threat evolution Q2 2020. PC statistics
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-0199 | Remote Code Execution in Microsoft Office and WordPad via crafted document files | 7.8 | 99% | KEVRansomwarePoC ×6 | KEV |
| CVE-2017-11882 | Memory Corruption RCE in Microsoft Office via Legacy Equation Editor | 7.8 | 100% | KEVRansomwarePoC ×10 | KEV |
| CVE-2017-8570 | Remote Code Execution in Microsoft Office via Malicious PPSX Files (CVE-2017-8570) | 7.8 | 90% | KEVPoC ×2 | KEV |
| CVE-2017-8759 | Remote Code Execution in Microsoft .NET Framework via Malicious Documents (CWE-94) | 7.8 | 89% | KEVPoC ×2 | KEV |
| CVE-2018-0802 | Memory Corruption RCE in Microsoft Office Equation Editor | 7.8 | 93% | KEVRansomwarePoC ×3 | KEV |
CVE-2020-6820+1 related CVE | Use-after-free (race condition) in Mozilla Firefox and Thunderbird | 8.1 | 7% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | backdoor.linux.mirai.cn | ux.Gafgyt.bj 2.23 HEUR:Trojan-Downloader.Shell.Agent.p 1.66 Backdoor.Linux.Mirai.cn 1.26 HEUR:Backdoor.Linux.Mirai.c 0.73 * Share of the malwar |
From the original article
13 min read at securelist.com
These statistics are based on detection verdicts of Kaspersky products received from users who consented to provide statistical data. Kaspersky solutions blocked 899,744,810 attacks launched from online resources in 191 countries across the globe. As many as 286,229,445 unique URLs triggered Web Anti-Virus components.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.