Microsoft works with researchers to detect and protect against new RDP exploits - Microsoft Security Blog
Tags
country: Germany France Israel Italy Spain Ukraine United Kingdom
attack-pattern: Models Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Powershell - T1059.001 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Vulnerabilities - T1588.006 Powershell - T1086 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID 2e465433-ffb7-4087-8177-46891d961c3c
Fingerprint fd72a981380798cf
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 7, 2019, 1:05 p.m.
Added to db Feb. 17, 2023, 11:04 p.m.
Last updated Nov. 17, 2024, 6:53 p.m.
Headline Microsoft works with researchers to detect and protect against new RDP exploits
Title Microsoft works with researchers to detect and protect against new RDP exploits - Microsoft Security Blog
Detected Hints/Tags/Attributes 50/2/5
Source URLs
Redirection Url
Details Redirection https://www.microsoft.com/security/blog/2019/11/07/the-new-cve-2019-0708-rdp-exploit-attacks-explained/
URL Provider
Details Provider Source level domain
Details microsoft.com www.microsoft.com
Attributes
Details Type #Events CTI Value
Details CVE 197 
cve-2019-0708
Details File 2 
c:\windows\system32\spool\svchost.exe
Details IPv4 1 
5.135.199.19
Details IPv4 2 
109.176.117.11
Details IPv4 2 
5.100.251.106