Tag: pdf
3 attack reports | 0 vulnerabilities
Attack reports
Rivers of Phish: Sophisticated Phishing Targets Russia's Perceived Enemies Around the Globe
An extensive investigation uncovered an elaborate phishing campaign conducted by a Russia-based threat actor known as COLDRIVER, attributed to Russia's Federal Security Service. The campaign employed personalized social engineering tactics to target civil society groups, NGOs, journalists, and gove…
Downloadable IOCs 28
Exploiting CVE-2024-21412: A Stealer Campaign Unleashed
This report details a malicious campaign exploiting the CVE-2024-21412 vulnerability in Microsoft Windows SmartScreen to bypass security warnings and deliver malware. Attackers employ crafted links, LNK files, and HTA scripts to download decoy PDFs and shell code injectors, ultimately injecting ste…
Downloadable IOCs 27
PDF “Flawed Design” Exploitation
Check Point Research identified an unusual pattern involving PDF exploitation, mainly targeting users of Foxit Reader. This exploit triggers security warnings that could deceive users into executing harmful commands. The exploitation occurs through a flawed design in Foxit Reader, showing 'OK' as t…
Downloadable IOCs 40