Tag: CVE-2017-9805

2 Attack Reports | 0 Vulnerabilities

Attack reports

China-linked Actors Maintain Focus on Organizations Influencing U.S. Policy

Chinese threat actors continue to target U.S. organizations involved in policy issues. A recent intrusion into a non-profit organization active in influencing U.S. government policy on international matters occurred in April 2025. The attackers, likely Chinese-based, used various techniques to esta…

dll sideloading

policy influence

domain controllers

Published: November 7, 2025

Linked vulnerabilities : CVE-2021-44228, CVE-2022-26134, CVE-2017-9805, CVE-2017-17562

Downloadable IOCs: 7

Custom Arsenal Developed to Target Multiple Industries

Earth Lamia, an APT threat actor, has been targeting organizations in Brazil, India, and Southeast Asia since 2023. The group exploits web application vulnerabilities, particularly SQL injection, to gain access to targeted systems. They have developed custom tools like PULSEPACK backdoor and Bypass…

dll sideloading

vulnerability exploitation

multi-industry targeting

Published: May 27, 2025

Linked vulnerabilities : CVE-2024-9047 (CVSS 9.8), CVE-2024-51378 (CVSS 10.0), CVE-2024-51567 (CVSS 10.0), CVE-2024-56145, CVE-2025-31324 (CVSS 10.0), CVE-2017-9805, CVE-2024-27199, CVE-2024-27198, CVE-2021-22205

Downloadable IOCs: 185

Click here to see more Attack Reports