---
id: 7392
title: "[CVE-2017-11882] Chiến dịch của nhóm APT Goblin Panda lợi dụng đại dịch Covid-19"
cve: CVE-2017-11882
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/chien-dich-cua-nhom-apt-goblin-panda-loi-dung-dai-dich-covid-19/"
published_at: "2020-05-01T07:43:31Z"
tags: ["threat-intelligence", "apt", "viettel", "covid-19", "rat", "plugx", "goblin-panda"]
phying_url: "https://phying.com/item/7392"
lang: en
---

# [CVE-2017-11882] Chiến dịch của nhóm APT Goblin Panda lợi dụng đại dịch Covid-19

## Summary

Viettel Threat Intelligence tracks Goblin Panda (aka Hellsing, 1937CN) campaigns exploiting COVID-19 themes, using RTF exploits and PlugX/NewCoreRAT to breach government targets and evade most AVs.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2017-11882
- **Published:** 2020-05-01T07:43:31Z
- **Original:** https://blog.viettelcybersecurity.com/chien-dich-cua-nhom-apt-goblin-panda-loi-dung-dai-dich-covid-19/
- **Phying News:** https://phying.com/item/7392