แฮกเกอร์ใช้ช่องโหว่ในไดรเวอร์ Avast Anti-Rootkit เพื่อปิดการใช้งานระบบป้องกันความปลอดภัย
Tags
country: Cuba
attack-pattern: Rootkit - T1014 Rootkit
Show in Graph
Common Information
Type Value
UUID 5b6ff622-3b8b-46ee-b395-62bc4a327897
Fingerprint 57ffab741f5f245a
Analysis status DONE
Considered CTI value 1
Text language
Published Nov. 25, 2024, 8 a.m.
Added to db Nov. 25, 2024, 9:35 a.m.
Last updated Dec. 12, 2024, 3:41 p.m.
Headline แฮกเกอร์ใช้ช่องโหว่ในไดรเวอร์ Avast Anti-Rootkit เพื่อปิดการใช้งานระบบป้องกันความปลอดภัย
Title แฮกเกอร์ใช้ช่องโหว่ในไดรเวอร์ Avast Anti-Rootkit เพื่อปิดการใช้งานระบบป้องกันความปลอดภัย
Detected Hints/Tags/Attributes 11/2/7
Source URLs
Redirection Url
Details Source https://medium.com/@National_CERT_NCSA/%E0%B9%81%E0%B8%AE%E0%B8%81%E0%B9%80%E0%B8%81%E0%B8%AD%E0%B8%A3%E0%B9%8C%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B8%8A%E0%B9%88%E0%B8%AD%E0%B8%87%E0%B9%82%E0%B8%AB%E0%B8%A7%E0%B9%88%E0%B9%83%E0%B8%99%E0%B9%84%E0%B8%94%E0%B8%A3%E0%B9%80%E0%B8%A7%E0%B8%AD%E0%B8%A3%E0%B9%8C-avast-anti-rootkit-%E0%B9%80%E0%B8%9E%E0%B8%B7%E0%B9%88%E0%B8%AD%E0%B8%9B%E0%B8%B4%E0%B8%94%E0%B8%81%E0%B8%B2%E0%B8%A3%E0%B9%83%E0%B8%8A%E0%B9%89%E0%B8%87%E0%B8%B2%E0%B8%99%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A%E0%B8%9B%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%81%E0%B8%B1%E0%B8%99%E0%B8%84%E0%B8%A7%E0%B8%B2%E0%B8%A1%E0%B8%9B%E0%B8%A5%E0%B8%AD%E0%B8%94%E0%B8%A0%E0%B8%B1%E0%B8%A2-22e95c2d07cf?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 9 
cve-2022-26522
Details CVE 10 
cve-2022-26523
Details File 7 
kill-floor.exe
Details File 10 
ntfs.bin
Details File 21 
aswarpot.sys
Details File 129 
sc.exe
Details Url 1 
https://www.bleepingcomputer.com/news/security/hackers-abuse-avast-anti-rootkit-driver-to-disable-defenses