PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2017-8570] Patchwork APT Group Targets US Think Tanks

volexity.com | vulnerability | CVE-2017-8570 | #vulnerability-research | #threat-intelligence | #phishing | #apt | #patchwork
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

In March and April 2018, Volexity identified multiple spear phishing campaigns attributed to Patchwork, an Indian APT group also known as Dropping Elephant. This increase in threat activity was consistent […]
CVE
CVE-2017-8570
Published
Collected

Related coverage

research · volexity.com
PowerDuke: Widespread Post-Election Spear Phishing Campaigns Targeting Think Tanks and NGOs
In the wake of the 2016 United States Presidential Election, not even six hours after Donald Trump became the nation’s President-Elect, an advanced persistent threat (APT) group launched a series […]
vulnerability · volexity.com
DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach
Volexity frequently works with individuals and organizations heavily targeted by sophisticated, motivated, and well-equipped threat actors from around the world. Some of these individuals or organizations are attacked infrequently or […]
vulnerability · volexity.com
Active Exploitation of Newly Patched ColdFusion Vulnerability (CVE-2018-15961)
If your organization is running an Internet-facing version of ColdFusion, you may want to take a close look at your server. Volexity recently observed active exploitation of a newly patched […]
vulnerability · volexity.com
Virtual Private Keylogging: Cisco Web VPNs Leveraged for Access and Persistence
In the world of information security, there is never a dull moment. Part of the fun of working in this space is that you always get to see attackers do […]
vulnerability · volexity.com
APT Group Wekby Leveraging Adobe Flash Exploit (CVE-2015-5119)
As if the recent breach and subsequent public data dump involving the Italian company Hacking Team wasn’t bad enough, it all gets just a little bit worse. Emerging from the […]
research · volexity.com
Suspected APT29 Operation Launches Election Fraud Themed Phishing Campaigns
On May 25, 2021, Volexity identified a phishing campaign targeting multiple organizations based in the United States and Europe. The following industries have been observed being targeted thus far: NGOs […]
Back