Cadet Blizzard emerges as a novel and distinct Russian threat actor

Cadet Blizzard is also known for exploiting Confluence servers through the CVE-2021-26084 vulnerability, Exchange servers through multiple vulnerabilities including CVE-2022-41040 and ProxyShell, and likely commodity vulnerabilities in various open-source platforms such as content management systems.

ngoing hands-on-keyboard attack via Impacket toolkit Suspicious PowerShell command line Suspicious WMI process creation Microsoft Defender Vulnerability Management Microsoft Defender Vulnerability Management surfaces devices that may be affected by the following vulnerabilities used in this threat: CVE-2021-26084

keyboard attack via Impacket toolkit Suspicious PowerShell command line Suspicious WMI process creation Microsoft Defender Vulnerability Management Microsoft Defender Vulnerability Management surfaces devices that may be affected by the following vulnerabilities used in this threat: CVE-2021-26084 CVE-2020-1472

via Impacket toolkit Suspicious PowerShell command line Suspicious WMI process creation Microsoft Defender Vulnerability Management Microsoft Defender Vulnerability Management surfaces devices that may be affected by the following vulnerabilities used in this threat: CVE-2021-26084 CVE-2020-1472 CVE-2021-4034

Cadet Blizzard is also known for exploiting Confluence servers through the CVE-2021-26084 vulnerability, Exchange servers through multiple vulnerabilities including CVE-2022-41040 and ProxyShell, and likely commodity vulnerabilities in various open-source platforms such as content management systems.