Russian SVR Exploiting Unpatched Vulnerabilities in Global Cyber Campaign
Tags
cmtmf-attack-pattern: Code Injection Supply Chain Compromise
country: Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Cloud Accounts - T1078.004 Cloud Accounts - T1585.003 Cloud Accounts - T1586.003 Cloud Services - T1021.007 Code Injection - T1540 Credentials - T1589.001 Email Accounts - T1585.002 Email Accounts - T1586.002 Malicious File - T1204.002 Multi-Factor Authentication - T1556.006 Password Spraying - T1110.003 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Sharepoint - T1213.002 Software - T1592.002 Supply Chain Compromise - T1474 Vulnerabilities - T1588.006 Connection Proxy - T1090 Scripting - T1064 Supply Chain Compromise - T1195 Scripting Supply Chain Compromise
Show in Graph
Common Information
Type Value
UUID 603162ad-f396-4502-b575-9282e2e355a7
Fingerprint bc810d91db45d761
Analysis status DONE
Considered CTI value 2
Text language
Published Oct. 10, 2024, 5:14 p.m.
Added to db Oct. 10, 2024, 7:40 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline Russian SVR Exploiting Unpatched Vulnerabilities in Global Cyber Campaign
Title Russian SVR Exploiting Unpatched Vulnerabilities in Global Cyber Campaign
Detected Hints/Tags/Attributes 71/4/27
Source URLs
Redirection Url
Details Source https://thecyberexpress.com/rus-svr-exploiting-unpatched-vulnerabilities/
URL Provider
Details Provider Source level domain
Details thecyberexpress.com thecyberexpress.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 248 ✔ The Cyber Express https://thecyberexpress.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 117 
cve-2023-20198
Details CVE 35 
cve-2023-4911
Details CVE 38 
cve-2023-38545
Details CVE 19 
cve-2023-38546
Details CVE 1 
cve-2023-40289
Details CVE 7 
cve-2023-24023
Details CVE 2 
cve-2023-40088
Details CVE 1 
cve-2023-40076
Details CVE 1 
cve-2023-40077
Details CVE 5 
cve-2023-45866
Details CVE 2 
cve-2022-40507
Details CVE 8 
cve-2023-36745
Details CVE 116 
cve-2023-4966
Details CVE 7 
cve-2023-6345
Details CVE 20 
cve-2023-37580
Details CVE 1 
cve-2021-27850
Details CVE 44 
cve-2021-41773
Details CVE 25 
cve-2021-42013
Details CVE 150 
cve-2018-13379
Details CVE 53 
cve-2023-42793
Details CVE 48 
cve-2023-29357
Details CVE 27 
cve-2023-24955
Details CVE 77 
cve-2023-35078
Details CVE 7 
cve-2023-5044
Details CVE 19 
cve-2022-27924
Details Domain 117 
ld.so
Details Threat Actor Identifier - APT 665 
APT29