In-Depth Analysis: Velvet Ant's Prolonged Cyber Attack on a Large Organization
sygnia.co · 3 Jun 2024 · Licence: not cleared; local research copy only
CVEs this report names
1 CVE- CVE-2024-20399Cisco NX-OS Command Injection VulnerabilityCisco · NX-OSKEVPublic exploitMedium · 6.7T1078Valid AccountsT1059Command and Scripting Interpreter3 reports4.3%Top 8.8%73.7priority
Where it names them
CVE-2024-20399 Original (opens in a new tab) ↗
China-Nexus Threat Group ‘Velvet Ant’ Exploits Cisco Zero-Day (CVE-2024-20399) to Compromise Nexus Switch Devices – Advisory for Mitigation and Response
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.