朝鲜威胁行为者利用 Chromium 中的零日漏洞 CVE-2024-7971
Tags
| attack-pattern: | Javascript - T1059.007 Rootkit - T1014 Rootkit |
Common Information
| Type | Value |
|---|---|
| UUID | 84f909e8-2970-4e65-b1be-679a56c48d12 |
| Fingerprint | 8c0703b446883066 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | June 20, 2024, midnight |
| Added to db | Aug. 31, 2024, 5 p.m. |
| Last updated | Nov. 12, 2024, 11:52 a.m. |
| Headline | 朝鲜威胁行为者利用 Chromium 中的零日漏洞 CVE-2024-7971 |
| Title | 朝鲜威胁行为者利用 Chromium 中的零日漏洞 CVE-2024-7971 |
| Detected Hints/Tags/Attributes | 14/1/9 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://cn-sec.com/archives/3116449.html |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 483 | ✔ | CN-SEC 中文网 | https://cn-sec.com/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 57 | cve-2024-7971 |
|
| Details | CVE | 39 | cve-2024-38106 |
|
| Details | CVE | 23 | cve-2024-21338 |
|
| Details | CVE | 37 | cve-2024-38193 |
|
| Details | File | 1 | 因为它利用了appid.sys |
|
| Details | File | 8 | appid.sys |
|
| Details | File | 19 | afd.sys |
|
| Details | Mandiant Uncategorized Groups | 59 | UNC4736 |
|
| Details | Url | 3 | https://www.microsoft.com/en-us/security/blog/2024/08/30/north-korean-threat-actor-citrine-sleet-exploiting-chromium-zero-day |