Bumblebee: New Loader Rapidly Assuming Central Position in Cyber-crime Ecosystem

security.com · Undated · Licence: not cleared; local research copy only

CVEs this report names

1 CVE

CVE-2021-34527Microsoft Windows Print Spooler Remote Code Execution Vulnerability
Microsoft · WindowsKEVRansomwarePublic exploitHigh · 8.8T1059Command and Scripting Interpreter T1068Exploitation for Privilege Escalation4 reports
99.8%Top 0.04%
88.1priority

The attackers also made use of a PowerShell script named cve-2021-34527.ps1 that has previously been linked to Conti’s leaked attack playbook.

None

No passage in this report has been tied to an ATT&CK technique.