Sofacy APT hits high profile targets with updated toolset

securelist.com · Undated · Licence: not assessed; coordinator-only cache; do not redistribute

CVEs this report names

1 CVE

CVE-2015-2590Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
Oracle · Java SEKEVCritical · 9.8T1190Exploit Public-Facing Application2 reports
25.5%Top 2%
70.6priority

Where it names them

CVE-2015-2590

The JHUHUGIT implant became a relatively popular first stage for the Sofacy attacks and was used again with a Java zero-day (CVE-2015-2590) in July 2015.

Original ↗

Techniques drawn from this report

None

No passage in this report has been tied to an ATT&CK technique.