LockBit Ransomware 2.0 Resurfaces
blog.cyble.com · Undated · Licence: TRAM repository license; underlying reports not cleared for redistribution
CVEs this report names
1 CVE- CVE-2017-0199Microsoft Office and WordPad Remote Code Execution VulnerabilityMicrosoft · Office and WordPadKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious FileT1203Exploitation for Client Execution12 reports99.5%Top 0.06%88.4priority
Where it names them
CVE-2017-0199 Original (opens in a new tab) ↗
This technique employed by the attackers aligns with CVE-2017-0199.
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.