Detect CVE-2023-23397 Exploits: Critical Elevation of Privilege Vulnerability in Microsoft Outlook Leveraged in the Wild to Target European Government and Military - SOC Prime
Tags
| cmtmf-attack-pattern: | Forced Authentication |
| country: | Russia Ukraine |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Exploits - T1587.004 Exploits - T1588.005 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004 Software - T1592.002 Forced Authentication - T1187 |
Common Information
| Type | Value |
|---|---|
| UUID | cb6a803f-2638-4946-b3f4-b060aad7109c |
| Fingerprint | 4117995194cce87 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | March 16, 2023, 11:32 a.m. |
| Added to db | March 16, 2023, 1:22 p.m. |
| Last updated | Nov. 17, 2024, 6:56 p.m. |
| Headline | Detect CVE-2023-23397 Exploits: Critical Elevation of Privilege Vulnerability in Microsoft Outlook Leveraged in the Wild to Target European Government and Military |
| Title | Detect CVE-2023-23397 Exploits: Critical Elevation of Privilege Vulnerability in Microsoft Outlook Leveraged in the Wild to Target European Government and Military - SOC Prime |
| Detected Hints/Tags/Attributes | 45/4/8 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 237 | ✔ | SOC Prime | https://socprime.com/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CERT Ukraine | 19 | UAC-0028 |
|
| Details | CVE | 176 | cve-2023-23397 |
|
| Details | CVE | 172 | cve-2022-30190 |
|
| Details | Domain | 32 | my.socprime.com |
|
| Details | MITRE ATT&CK Techniques | 7 | T1187 |
|
| Details | MITRE ATT&CK Techniques | 409 | T1566 |
|
| Details | Threat Actor Identifier - APT | 783 | APT28 |
|
| Details | Url | 4 | https://my.socprime.com/pricing |