Data breachhigh
Cyber Attacks Against Uyghur Mac OS X Users Intensify
- CVEs
- CVE-2009-0563
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2009-0563 | Buffer Overflow RCE in Microsoft Office via Crafted Word Document | — | 60% | KEV | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | apple12.crabdance.com | 1880 bytes update.googmail.org 207.204.245.192 104140 bytes apple12.crabdance.com N/A These two are well-known APT domains used for years wit |
| domain | update.googmail.org | s to the following C2s: Backdoor version C2 IP 101880 bytes update.googmail.org 207.204.245.192 104140 bytes apple12.crabdance.com N/A Thes |
| ipv4 | 207.204.231.196 | vailable, but it previously resolved to 207.204.245.192 and 207.204.231.196. Both servers are hosted at Black Oak Computers Inc. , whic |
| ipv4 | 207.204.245.192 | 2s: Backdoor version C2 IP 101880 bytes update.googmail.org 207.204.245.192 104140 bytes apple12.crabdance.com N/A These two are well-k |
From the original article
5 min read at securelist.com
In partnership with researchers at AlienVault Labs, we ve analysed a series of targeted attacks against Uyghur Mac OS X users which took place during the past months. You can read their analysis here . For our research, please read below.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.