SecuriTricks - CVE-2024-21412

DragonForce Ransomware Gang | From Hacktivists to High Street Extortionists

The DragonForce ransomware group, initially a pro-Palestine hacktivist operation, has evolved into a profit-driven extortion enterprise targeting UK retailers and various global entities. Emerging in August 2023, the group now employs a multi-extortion model, threatening data leaks and reputational…

ransomware

extortion

dragonforce ransomware

white-label

Published: May 3, 2025

Downloadable IOCs: 0

Exploiting CVE-2024-21412: A Stealer Campaign Unleashed

This report details a malicious campaign exploiting the CVE-2024-21412 vulnerability in Microsoft Windows SmartScreen to bypass security warnings and deliver malware. Attackers employ crafted links, LNK files, and HTA scripts to download decoy PDFs and shell code injectors, ultimately injecting ste…

Published: July 24, 2024

Linked vulnerabilities : CVE-2024-21412

Downloadable IOCs: 27

Increase In The Exploitation Of Microsoft SmartScreen Vulnerability CVE-2024-21412

Cyble analyzes an ongoing campaign exploiting a Microsoft SmartScreen vulnerability to deliver stealers through spam emails. The campaign employs lures related to healthcare, transportation, and tax notices to trick users into downloading malicious payloads. It utilizes techniques like DLL sideload…

Published: July 11, 2024

Downloadable IOCs: 12

The Darkgate Menace: Leveraging Autohotkey & Attempt to Evade Smartscreen

This report details a novel infection chain associated with DarkGate malware, a Remote Access Trojan (RAT) that exploits the AutoHotkey utility and attempts to bypass Microsoft Defender SmartScreen. The infection begins with an HTML-based entry point or an XLS file, utilizing techniques such as dis…

microsoft defender smartscreen

xls file

Published: April 30, 2024

Downloadable IOCs: 15

Tag: CVE-2024-21412

Attack reports

DragonForce Ransomware Gang | From Hacktivists to High Street Extortionists

Exploiting CVE-2024-21412: A Stealer Campaign Unleashed

Increase In The Exploitation Of Microsoft SmartScreen Vulnerability CVE-2024-21412

The Darkgate Menace: Leveraging Autohotkey & Attempt to Evade Smartscreen