New campaign targeting security researchers

blog.google · 25 Jan 2021 · Licence: not cleared; local research copy only

CVEs this report names

1 CVE

CVE-2021-1647Microsoft Defender Remote Code Execution Vulnerability
Microsoft · DefenderKEVPublic exploitHigh · 7.8T1068Exploitation for Privilege Escalation1 report
39.7%Top 1.4%
72.1priority

Where it names them

CVE-2021-1647

On Jan 14, 2021, the actors shared via Twitter a YouTube video they uploaded that proclaimed to exploit CVE-2021-1647, a recently patched Windows Defender vulnerability.

Original ↗

Techniques drawn from this report

None

No passage in this report has been tied to an ATT&CK technique.