Three Months After Patch, Gov-Backed Actors Exploiting WinRAR Flaw
Tags
country: China North Korea Papua New Guinea Russia Ukraine
attack-pattern: Data Artificial Intelligence - T1588.007 Confluence - T1213.001 Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID 095aaaeb-a9ab-4cde-bc07-22991fe733a9
Fingerprint a32115fdeb02d86f
Analysis status DONE
Considered CTI value 1
Text language
Published Oct. 18, 2023, midnight
Added to db Oct. 22, 2023, 10:15 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Three Months After Patch, Gov-Backed Actors Exploiting WinRAR Flaw
Title Three Months After Patch, Gov-Backed Actors Exploiting WinRAR Flaw
Detected Hints/Tags/Attributes 48/2/2
Source URLs
Redirection Url
Details Source https://www.securityweek.com/three-months-after-patch-gov-backed-actors-exploiting-winrar-flaw/
URL Provider
Details Provider Source level domain
Details securityweek.com www.securityweek.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 162 ✔ — https://media.cert.europa.eu/rss?type=category&id=APTFilter&language=en&duplicates=false 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 133 
cve-2023-38831
Details Threat Actor Identifier - APT 783 
APT28