Patchfirst

OutSteel, SaintBot Delivered by Spear Phishing Attacks Targeting Ukraine Spear Phishing Attacks Target Organizations in Ukraine, Payloads Include the Document Stealer OutSteel and the Downloader Saint

unit42.paloaltonetworks.com · 26 Feb 2022 · Licence: not cleared; local research copy only

Read the original ↗

CVEs this report names

1 CVE
  1. CVE-2017-11882Microsoft Office Memory Corruption Vulnerability
    Microsoft · OfficeKEVRansomwarePublic exploitHigh · 7.8T1566.001Spearphishing AttachmentT1059Command and Scripting Interpreter13 reports
    99.9%Top 0.03%
    88.5priority

Where it names them

CVE-2017-11882
Even the Word documents attached to emails have used a variety of techniques, including malicious macros, embedded JavaScript and the exploitation of CVE-2017-11882 to install payloads onto the system.
Original (opens in a new tab) ↗

Techniques drawn from this report

None

No passage in this report has been tied to an ATT&CK technique.

↑ ↓ chooseEnter openEsc close