{"metadata": {"vulnerability": "CVE-2023-36025", "count": 128, "kinds": {"milestone": 6, "sighting": 84, "kev": 11, "other": 27}, "linked_omitted": 0}, "data": [{"timestamp": "2023-06-20T20:44:39.824Z", "date_only": false, "value": "2023-06-20T20:44:39.824Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-36025", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a996d344-b7d6-4411-8b62-58e42ee6c18a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-36025", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "8abe9e5d-f450-4570-ad5c-01ad549d709b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": true, "value": "2023-11-14", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-36025", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-36025", "field": "evidence.0.details.added_date", "uuid": "8abe9e5d-f450-4570-ad5c-01ad549d709b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": true, "value": "2023-11-14", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "evidence.0.details.date_added", "uuid": "a996d344-b7d6-4411-8b62-58e42ee6c18a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a996d344-b7d6-4411-8b62-58e42ee6c18a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-36025", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "8abe9e5d-f450-4570-ad5c-01ad549d709b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "status.status_updated_at", "uuid": "a996d344-b7d6-4411-8b62-58e42ee6c18a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-36025", "field": "status.status_updated_at", "uuid": "8abe9e5d-f450-4570-ad5c-01ad549d709b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-36025", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2023-36025 added to CISA KEV"}, {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2023-36025", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-11-14T17:57:39.104Z", "date_only": false, "value": "2023-11-14T17:57:39.104Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-36025", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-11-14T18:15:00Z", "date_only": false, "value": "2023-11-14T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-36025", "record": "GSD-2023-36025", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-11-14T18:15:31Z", "date_only": false, "value": "2023-11-14T18:15:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4JFF-227J-6G3V", "record": "GHSA-4JFF-227J-6G3V", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-11-14T18:15:31.867Z", "date_only": false, "value": "2023-11-14T18:15:31.867", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36025", "record": "FKIE_CVE-2023-36025", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-11-14T18:30:28Z", "date_only": false, "value": "2023-11-14T18:30:28Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4JFF-227J-6G3V", "record": "GHSA-4JFF-227J-6G3V", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-11-14T21:10:02Z", "date_only": false, "value": "2023-11-14T21:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "8bbb9b91-9b31-4a7f-8934-cbd02c57c7db"}, {"timestamp": "2023-11-14T23:00:00Z", "date_only": false, "value": "2023-11-14T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2890", "record": "WID-SEC-W-2023-2890", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-11-14T23:00:00Z", "date_only": false, "value": "2023-11-14T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2890", "record": "WID-SEC-W-2023-2890", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-11-14T23:00:00Z", "date_only": false, "value": "2023-11-14T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2890", "record": "WID-SEC-W-2023-2890", "field": "vulnerabilities.2.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-11-15T00:00:00Z", "date_only": false, "value": "2023-11-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0944", "record": "CERTFR-2023-AVI-0944", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2023-11-15T04:00:00Z", "date_only": false, "value": "2023-11-15T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1160", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "c90258e6-77ed-4558-a6b0-b01511070d70", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1160"}, {"timestamp": "2023-11-15T12:34:59Z", "date_only": false, "value": "2023-11-15T12:34:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/5085", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "90b5da76-2fe2-43cd-94ba-bc18bc74bcd1", "content": "Microsoft \u0432 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c PatchTuesday \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 5 0-day \u0438 58 \u043e\u0448\u0438\u0431\u043e\u043a, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 15 - RCE (\u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0434\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f) \u0438 3 - \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 - \u044d\u0442\u043e\u00a0\u043e\u0448\u0438\u0431\u043a\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 Azure, RCE \u0432 Windows Internet Connection Sharing (ICS) \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Hyper-V, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u043d\u0430 \u0445\u043e\u0441\u0442\u0435 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u043a \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u043c: 16 - \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 6 - \u043e\u0431\u0445\u043e\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 15 - RCE, 6 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 5 - DoS \u0438 11 - \u0441\u043f\u0443\u0444\u0438\u043d\u0433. \u041d\u0430\u0431\u043e\u0440 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 5 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Mariner \u0438 20 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Microsoft Edge.\n\n\u0418\u0437 \u043f\u044f\u0442\u0438 0-day \u0442\u0440\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e, \u0438 \u0442\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0418\u0437 \u043d\u0438\u0445:\n\n- CVE-2023-36036\u00a0- \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043c\u0438\u043d\u0438-\u0444\u0438\u043b\u044c\u0442\u0440\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 Windows Cloud Files, \u043f\u043e\u0432\u044b\u0448\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 Microsoft Threat Intelligence Microsoft Security Response Center, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n- CVE-2023-36033\u00a0- \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Windows DWM, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \u0415\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0426\u044e\u0430\u043d\u044c \u0426\u0437\u0438\u043d\u044c(@jq0904) \u0438 DBAPPSecurity WeBin Lab, \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442\u0441\u044f.\n\n- CVE-2023-36025\u00a0- \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows SmartScreen \u0431\u0435\u0437 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u044f\u0440\u043b\u044b\u043a \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 (.URL) \u0438\u043b\u0438 \u0433\u0438\u043f\u0435\u0440\u0441\u0441\u044b\u043b\u043a\u0443, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u043d\u0430 \u0444\u0430\u0439\u043b \u044f\u0440\u043b\u044b\u043a\u0430. \u0411\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0423\u0438\u043b\u043b\u043e\u043c \u041c\u0435\u0442\u043a\u0430\u043b\u0444\u043e\u043c (Splunk), Microsoft Threat Intelligence \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0433\u0440\u0443\u043f\u043f\u044b \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Microsoft Office.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-36413 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Microsoft Office) \u0438 CVE-2023-36038 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c DoS \u044f\u0434\u0440\u0430 ASP.NET). \u0412 Microsoft \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043a\u0430\u0436\u0434\u043e\u0439 \u0438\u0437 \u043d\u0438\u0445 \u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0437\u0434\u0435\u0441\u044c.", "url": "https://t.me/true_secator/5085"}, {"timestamp": "2023-11-17T08:13:29Z", "date_only": false, "value": "2023-11-17T08:13:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hackyourmom/5983", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "212c6534-0df8-40a0-93e1-783871aa1a0c", "content": "\u041d\u0430 \u0446\u044c\u043e\u043c\u0443 \u0442\u0438\u0436\u043d\u0456 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u044f Microsoft \u0432\u0438\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043b\u0438\u0441\u0442\u043e\u043f\u0430\u0434\u043e\u0432\u0438\u0439 \u043d\u0430\u0431\u0456\u0440 \u043f\u0430\u0442\u0447\u0456\u0432, \u044f\u043a\u0456 \u0437\u0430\u0433\u0430\u043b\u043e\u043c \u0443\u0441\u0443\u043d\u0443\u043b\u0438 58 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0437\u0430 \u0432\u0438\u043d\u044f\u0442\u043a\u043e\u043c \u0449\u0435 20 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044c \u0434\u043b\u044f Microsoft Edge, \u0432\u0438\u043f\u0443\u0449\u0435\u043d\u0438\u0445 \u0440\u0430\u043d\u0456\u0448\u0435), \u0443 \u0442\u043e\u043c\u0443 \u0447\u0438\u0441\u043b\u0456 \u043f'\u044f\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0442\u0438\u043f\u0443 0-day.\n\u0425\u043e\u0447\u0430 \u0446\u044c\u043e\u0433\u043e \u043c\u0456\u0441\u044f\u0446\u044f \u0431\u0443\u043b\u043e \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 14 \u043f\u043e\u043c\u0438\u043b\u043e\u043a, \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u0438\u0445 \u0437 \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u0438\u043c \u0432\u0438\u043a\u043e\u043d\u0430\u043d\u043d\u044f\u043c \u043a\u043e\u0434\u0443 (RCE), \u043b\u0438\u0448\u0435 \u043e\u0434\u043d\u0443 \u0437 \u043d\u0438\u0445 \u0444\u0430\u0445\u0456\u0432\u0446\u0456 Microsoft \u043e\u0446\u0456\u043d\u0438\u043b\u0438 \u044f\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0443: \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c CVE-2023-36052 \u0432 Azure CLI, \u0437\u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0434\u043e\u0441\u043b\u0456\u0434\u043d\u0438\u043a\u0430\u043c\u0438 Palo Alto Networks.\n\n\u0426\u0435\u0439 \u0431\u0430\u0433 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0432 \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0430\u043c \u0432\u043a\u0440\u0430\u0441\u0442\u0438 \u043e\u0431\u043b\u0456\u043a\u043e\u0432\u0456 \u0434\u0430\u043d\u0456 \u0437 GitHub Actions \u0430\u0431\u043e \u0436\u0443\u0440\u043d\u0430\u043b\u0456\u0432 Azure DevOps, \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u0445 \u0437\u0430 \u0434\u043e\u043f\u043e\u043c\u043e\u0433\u043e\u044e Azure CLI. \u0423\u0441\u043f\u0456\u0448\u043d\u0435 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u0430\u043d\u043d\u044f \u0446\u044c\u043e\u0433\u043e \u0431\u0430\u0433\u0443 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u043e\u0432\u0430\u043d\u0438\u043c \u0442\u0440\u0435\u0442\u0456\u043c \u043e\u0441\u043e\u0431\u0430\u043c \u043e\u0442\u0440\u0438\u043c\u0443\u0432\u0430\u0442\u0438 \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0432\u043c\u0456\u0441\u0442\u0443, \u0437\u0430\u043f\u0438\u0441\u0430\u043d\u043e\u0433\u043e Azure CLI \u0443 \u0436\u0443\u0440\u043d\u0430\u043b\u0438 CI/CD.\n\"\u0417\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a, \u044f\u043a\u0438\u0439 \u0443\u0441\u043f\u0456\u0448\u043d\u043e \u0435\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0443\u0454 \u0446\u044e \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c, \u043c\u043e\u0436\u0435 \u0432\u0456\u0434\u043d\u043e\u0432\u043b\u044e\u0432\u0430\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0456 \u0442\u0430 \u0456\u043c\u0435\u043d\u0430 \u043a\u043e\u0440\u0438\u0441\u0442\u0443\u0432\u0430\u0447\u0456\u0432 \u0443 \u0432\u0456\u0434\u043a\u0440\u0438\u0442\u043e\u043c\u0443 \u0432\u0438\u0433\u043b\u044f\u0434\u0456 \u0437 \u0444\u0430\u0439\u043b\u0456\u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0456\u0432, \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u0445 \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u043d\u0438\u043c\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438 CLI \u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0456\u043a\u043e\u0432\u0430\u043d\u0438\u0445 Azure DevOps \u0430\u0431\u043e GitHub Actions\", - \u043f\u043e\u044f\u0441\u043d\u044e\u0454 Microsoft. - \"\u041a\u043b\u0456\u0454\u043d\u0442\u0438, \u044f\u043a\u0456 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u044e\u0442\u044c \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456 \u043a\u043e\u043c\u0430\u043d\u0434\u0438 CLI, \u043f\u043e\u0432\u0438\u043d\u043d\u0456 \u043e\u043d\u043e\u0432\u0438\u0442\u0438 Azure CLI \u0434\u043e \u0432\u0435\u0440\u0441\u0456\u0457 2.53.1 \u0430\u0431\u043e \u0432\u0438\u0449\u0435, \u0449\u043e\u0431 \u0437\u0430\u0445\u0438\u0441\u0442\u0438\u0442\u0438\u0441\u044f \u0432\u0456\u0434 \u0440\u0438\u0437\u0438\u043a\u0456\u0432, \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u0438\u0445 \u0437 \u0446\u0456\u0454\u044e \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044e. \u0426\u0435 \u0442\u0430\u043a\u043e\u0436 \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u043a\u043b\u0456\u0454\u043d\u0442\u0456\u0432 \u0437 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u043c\u0438, \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u043c\u0438 \u0437\u0430 \u0434\u043e\u043f\u043e\u043c\u043e\u0433\u043e\u044e \u0446\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0447\u0435\u0440\u0435\u0437 Azure DevOps \u0442\u0430 GitHub Actions\".\n\u0417\u0430 \u0441\u043b\u043e\u0432\u0430\u043c\u0438 \u0444\u0430\u0445\u0456\u0432\u0446\u0456\u0432, \u043a\u043b\u0456\u0454\u043d\u0442\u0438, \u044f\u043a\u0456 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0438 Azure CLI, \u0432\u0436\u0435 \u0431\u0443\u043b\u0438 \u043f\u043e\u0432\u0456\u0434\u043e\u043c\u043b\u0435\u043d\u0456 \u043f\u0440\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0447\u0435\u0440\u0435\u0437 Azure Portal.\n\u0421\u0435\u0440\u0435\u0434 \u0456\u043d\u0448\u0438\u0445 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0445 \u0443 \u043b\u0438\u0441\u0442\u043e\u043f\u0430\u0434\u0456 RCE-\u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0431\u0443\u043b\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0432 Windows Internet Connection Sharing (ICS) \u0442\u0430 Hyper-V, \u044f\u043a\u0456 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0438 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0445\u043e\u0441\u0442\u0456 \u0437 \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u044f\u043c\u0438 \u0440\u0456\u0432\u043d\u044f SYSTEM.\n\u0429\u043e\u0434\u043e \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 0-day, \u0446\u044c\u043e\u0433\u043e \u043c\u0456\u0441\u044f\u0446\u044f \u0457\u0445 \u0431\u0443\u043b\u043e \u043f'\u044f\u0442\u044c, \u043f\u0440\u0438\u0447\u043e\u043c\u0443 \u0442\u0440\u0438 \u0437 \u043d\u0438\u0445 \u0432\u0436\u0435 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u043b\u0438\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0430 \u0456\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0456\u044f \u0449\u0435 \u043f\u0440\u043e \u0442\u0440\u0438 \u0431\u0443\u043b\u0430 \u043f\u0443\u0431\u043b\u0456\u0447\u043d\u043e \u0440\u043e\u0437\u043a\u0440\u0438\u0442\u0430 \u0434\u043e \u0432\u0438\u0445\u043e\u0434\u0443 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044c.\n\u0414\u043e \u0441\u043f\u0438\u0441\u043a\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0435\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u043e\u0432\u0430\u043d\u0438\u0445 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u0443\u0432\u0456\u0439\u0448\u043b\u0438:\nCVE-2023-36036 - \u043f\u0456\u0434\u0432\u0438\u0449\u0435\u043d\u043d\u044f \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0457\u0432 \u0443 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0456 Windows Cloud Files Mini Filter. Microsoft \u043f\u043e\u043f\u0435\u0440\u0435\u0434\u0436\u0443\u0454, \u0449\u043e \u0446\u044e \u043f\u043e\u043c\u0438\u043b\u043a\u0443 \u043c\u043e\u0436\u043d\u0430 \u0431\u0443\u043b\u043e \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u0442\u0438 \u0434\u043b\u044f \u043f\u0456\u0434\u0432\u0438\u0449\u0435\u043d\u043d\u044f \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0457\u0432 \u0434\u043e \u0440\u0456\u0432\u043d\u044f SYSTEM. \u041f\u043e\u043a\u0438 \u043d\u0435 \u043f\u043e\u0432\u0456\u0434\u043e\u043c\u043b\u044f\u0454\u0442\u044c\u0441\u044f, \u044f\u043a \u0441\u0430\u043c\u0435 \u0446\u0435\u0439 \u0431\u0430\u0433 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u043b\u0438 \u0445\u0430\u043a\u0435\u0440\u0438.\nCVE-2023-36033 - \u043f\u0456\u0434\u0432\u0438\u0449\u0435\u043d\u043d\u044f \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0457\u0432 \u0443 \u0431\u0456\u0431\u043b\u0456\u043e\u0442\u0435\u0446\u0456 \u044f\u0434\u0440\u0430 Windows Desktop Manager (WDM). \u0426\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u043e\u0436 \u043c\u043e\u0433\u043b\u0430 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u0442\u0438\u0441\u044f \u0434\u043b\u044f \u043f\u0456\u0434\u0432\u0438\u0449\u0435\u043d\u043d\u044f \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0457\u0432 \u0434\u043e \u0440\u0456\u0432\u043d\u044f SYSTEM. Microsoft \u043f\u043e\u0432\u0456\u0434\u043e\u043c\u0438\u043b\u0430, \u0449\u043e \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0431\u0443\u043b\u0430 \u0432\u0438\u044f\u0432\u043b\u0435\u043d\u0430 \u0444\u0430\u0445\u0456\u0432\u0446\u0435\u043c DBAPPSecurity WeBin Lab, \u0430\u043b\u0435 \u043d\u0435 \u043d\u0430\u0434\u0430\u043b\u0430 \u0436\u043e\u0434\u043d\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u0438\u0446\u044c \u0449\u043e\u0434\u043e \u0457\u0457 \u0435\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0456\u0457.\nCVE-2023-36025 - \u043e\u0431\u0445\u0456\u0434 \u0437\u0430\u0445\u0438\u0441\u0442\u0443 Windows Defender SmartScreen. \u0412\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0448\u043a\u0456\u0434\u043b\u0438\u0432\u043e\u043c\u0443 \u044f\u0440\u043b\u0438\u043a\u0443 Internet Shortcut \u043e\u0431\u0456\u0439\u0442\u0438 \u043f\u0435\u0440\u0435\u0432\u0456\u0440\u043a\u0438 \u0442\u0430 \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u0456 \u0437 \u043d\u0438\u043c\u0438 \u043f\u043e\u043f\u0435\u0440\u0435\u0434\u0436\u0435\u043d\u043d\u044f \u0449\u043e\u0434\u043e \u0431\u0435\u0437\u043f\u0435\u043a\u0438.\n\"\u041a\u043e\u0440\u0438\u0441\u0442\u0443\u0432\u0430\u0447\u0435\u0432\u0456 \u0434\u043e\u0441\u0442\u0430\u0442\u043d\u044c\u043e \u043a\u043b\u0456\u043a\u043d\u0443\u0442\u0438 \u043f\u043e \u0441\u043f\u0435\u0446\u0456\u0430\u043b\u044c\u043d\u043e \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u043e\u043c\u0443 \u044f\u0440\u043b\u0438\u043a\u0443 Internet Shortcut (.URL) \u0430\u0431\u043e \u0433\u0456\u043f\u0435\u0440\u043f\u043e\u0441\u0438\u043b\u0430\u043d\u043d\u044e, \u044f\u043a\u0435 \u0432\u043a\u0430\u0437\u0443\u0454 \u043d\u0430 \u0444\u0430\u0439\u043b Internet Shortcut, \u0449\u043e\u0431 \u043f\u043e\u0442\u0440\u0430\u043f\u0438\u0442\u0438 \u043f\u0456\u0434 \u0430\u0442\u0430\u043a\u0443 \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0430\", - \u043f\u0438\u0448\u0443\u0442\u044c \u0444\u0430\u0445\u0456\u0432\u0446\u0456 \u043a\u043e\u043c\u043f\u0430\u043d\u0456\u0457.\n\u041a\u0440\u0456\u043c \u0442\u043e\u0433\u043e, Microsoft \u043f\u043e\u0432\u0456\u0434\u043e\u043c\u043b\u044f\u0454, \u0449\u043e \u0443 \u0440\u0430\u043c\u043a\u0430\u0445 \u0446\u044c\u043e\u0433\u043e \"\u0432\u0456\u0432\u0442\u043e\u0440\u043a\u0430 \u043e\u043d\u043e\u0432\u043b\u0435\u043d\u044c\" \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0449\u0435 \u0434\u0432\u0456 \u043f\u0443\u0431\u043b\u0456\u0447\u043d\u043e \u0440\u043e\u0437\u043a\u0440\u0438\u0442\u0456 \u0440\u0430\u043d\u0456\u0448\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0438 0-day: \u043e\u0431\u0445\u0456\u0434 \u0437\u0430\u0445\u0438\u0441\u043d\u0438\u0445 \u0444\u0443\u043d\u043a\u0446\u0456\u0439 Microsoft Office (CVE-2023-36413) \u0442\u0430 \u0432\u0456\u0434\u043c\u043e\u0432\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0433\u043e\u0432\u0443\u0432\u0430\u043d\u043d\u0456, \u043f\u043e\u0432'\u044f\u0437\u0430\u043d\u0443 \u0437 ASP.NET (CVE-2023-36038). \u0426\u0456 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u043d\u0435 \u0432\u0438\u043a\u043e\u0440\u0438\u0441\u0442\u043e\u0432\u0443\u0432\u0430\u043b\u0438\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.", "url": "https://t.me/hackyourmom/5983", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-21T01:33:00Z", "date_only": false, "value": "2023-11-21T01:33Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-36025", "record": "GSD-2023-36025", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-11-21T22:42:02Z", "date_only": false, "value": "2023-11-21T22:42:02.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/73772", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "b6be1171-8355-400f-ae6c-b08fe6eea79a", "content": "\ud83d\udd74 Exploit for Critical Windows Defender Bypass Goes Public \ud83d\udd74\n\nThreat actors were actively exploiting CVE-2023-36025 in Windows SmartScreen as a zero-day vulnerability before Microsoft patched it in November.\n\n\ud83d\udcd6 Read\n\nvia \"Dark Reading\".", "url": "https://t.me/cibsecurity/73772", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-22T08:00:00Z", "date_only": false, "value": "2023-11-22T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2023-11-22T08:00:00Z", "date_only": false, "value": "2023-11-22T08:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-11-22T11:21:24Z", "date_only": false, "value": "2023-11-22T11:21:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/14566", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "286e5780-0ed6-4df7-908f-45305a188e52", "content": "CVE-2023-36025: \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442 SmartScreen \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows\n\n\ud83d\udcbbMicrosoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 SmartScreen, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 Windows Defender \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udcbb\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043a\u0430\u043a CVE-2023-36025, \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 TA544, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0430 \u0442\u0440\u043e\u044f\u043d\u044b Ursnif, WikiLoader \u0438 Remcos \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 .URL \u0444\u0430\u0439\u043b\u044b.\n\n\ud83d\udcbb\u0412 \u0441\u0435\u0442\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 (Proof of Concept, PoC) \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0447\u0442\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a. CVE-2023-36025 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 SmartScreen \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443.\n\n#Microsoft #SmartScreen #Exploit #Windows @SecLabNews", "url": "https://t.me/SecLabNews/14566", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-22T23:38:53Z", "date_only": false, "value": "2023-11-22T23:38:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/371", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "da45ba20-3694-4357-a160-1a2fadc6b0cb", "content": "#ExploitObserverAlert\n\nCVE-2023-36025\n\nDESCRIPTION: Exploit Observer has 8 entries related to CVE-2023-36025. Windows SmartScreen Security Feature Bypass Vulnerability\n\nFIRST-EPSS: 0.007930000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/371"}, {"timestamp": "2023-11-25T01:16:12Z", "date_only": false, "value": "2023-11-25T01:16:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/558", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "14a4f86f-b703-42f4-9438-ed6dcc05196e", "content": "#ExploitObserverAlert\n\nCVE-2023-36025\n\nDESCRIPTION: Exploit Observer has 8 entries related to CVE-2023-36025. Windows SmartScreen Security Feature Bypass Vulnerability\n\nFIRST-EPSS: 0.007930000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/558"}, {"timestamp": "2023-11-27T22:12:00Z", "date_only": false, "value": "2023-11-27T22:12:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/598", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "acaa69cc-112d-4082-9cf0-bf618ca2cd39", "content": "#ExploitObserverAlert\n\nCVE-2023-36025\n\nDESCRIPTION: Exploit Observer has 20 entries related to CVE-2023-36025. Windows SmartScreen Security Feature Bypass Vulnerability\n\nFIRST-EPSS: 0.007930000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/598"}, {"timestamp": "2023-11-28T10:51:36Z", "date_only": false, "value": "2023-11-28T10:51:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5981", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "a985d80f-187f-498d-b590-602a35f8db65", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1atest repo for CVE-2023-36025\nURL\uff1ahttps://github.com/louiselalanne/CVE-2023-49314\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5981", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-28T11:53:00Z", "date_only": false, "value": "2023-11-28T11:53:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5983", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "7f042b37-61f3-45df-a703-5a6314c270b4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1atest repo for CVE-2023-36025\nURL\uff1ahttps://github.com/J466Y/test_CVE-2023-36025\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5983", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-28T13:22:41Z", "date_only": false, "value": "2023-11-28T13:22:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/5989", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "68455040-6f10-4c94-bd17-e6bb0bba40c1", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1atest repo for CVE-2023-36025\nURL\uff1ahttps://github.com/louiselalanne/CVE-2023-49313\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5989"}, {"timestamp": "2023-11-29T04:44:51Z", "date_only": false, "value": "2023-11-29T04:44:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1607", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "fdaa2510-ce78-4af1-8a12-9b4c6a08004f", "content": "https://github.com/J466Y/test_CVE-2023-36025\n\nWindows SmartScreen Security Feature Bypass Vulnerability\n#github", "url": "https://t.me/CNArsenal/1607", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-29T10:37:41Z", "date_only": false, "value": "2023-11-29T10:37:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5998", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "6ae3d01c-c0e0-4b15-aceb-152509a4c6e6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aQuick test for CVE-2023-26025 behaviours\nURL\uff1ahttps://github.com/ka7ana/CVE-2023-36025\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5998", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-29T11:00:35Z", "date_only": false, "value": "2023-11-29T11:00:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9483", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "5fa003fb-215b-43ee-8a85-6741f2c27e01", "content": "#exploit\n1. CVE-2023-49314:\nAsana Desktop 2.1.0 (macOS) allows code injection because of specific Electron Fuses\nhttps://github.com/louiselalanne/CVE-2023-49314\n\n2. CVE-2023-36025:\nWindows SmartScreen Security Feature Bypass Vulnerability\nhttps://github.com/J466Y/test_CVE-2023-36025", "url": "https://t.me/CyberSecurityTechnologies/9483", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-29T13:02:42Z", "date_only": false, "value": "2023-11-29T13:02:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/738", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "ce1c24b6-2541-4c7c-829c-d6b462d89d5c", "content": "#ExploitObserverAlert\n\nCVE-2023-36025\n\nDESCRIPTION: Exploit Observer has 19 entries related to CVE-2023-36025. Windows SmartScreen Security Feature Bypass Vulnerability\n\nFIRST-EPSS: 0.007930000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/738"}, {"timestamp": "2023-12-05T00:00:00Z", "date_only": true, "value": "2023-12-05", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "evidence.0.details.due_date", "uuid": "a996d344-b7d6-4411-8b62-58e42ee6c18a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:20:34.340Z", "date_only": false, "value": "2023-12-13T01:20:34.340541Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-36025", "record": "GSD-2023-36025", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2023-12-22T10:21:41Z", "date_only": false, "value": "2023-12-22T10:21:41.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f0ef984c-2467-40aa-83c6-7c671a6379cb", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "2d8036e1-0c8b-495d-adec-587183f3fc71"}, {"timestamp": "2024-01-12T08:26:53Z", "date_only": false, "value": "2024-01-12T08:26:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/167123", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "f0ffba73-1202-455a-b738-891e3750c98b", "content": "https://ift.tt/NxoDRTk\nCVE-2023-36025 Exploited for Defense Evasion in Phemedrone Stealer Campaign", "url": "https://t.me/ctinow/167123"}, {"timestamp": "2024-01-12T08:41:42Z", "date_only": false, "value": "2024-01-12T08:41:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/167128", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "4c6bbe69-c5ad-4649-be59-7121f611b509", "content": "https://ift.tt/NxoDRTk\nCVE-2023-36025 Exploited for Defense Evasion in Phemedrone Stealer Campaign", "url": "https://t.me/ctinow/167128"}, {"timestamp": "2024-01-12T19:21:58Z", "date_only": false, "value": "2024-01-12T19:21:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/167451", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "25873a83-eb27-464a-b610-bdfed79462ba", "content": "https://ift.tt/RIzBEV2\nCVE-2023-36025 Exploited for Defense Evasion in Phemedrone Stealer Campaign", "url": "https://t.me/ctinow/167451", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-01-15T14:46:38Z", "date_only": false, "value": "2024-01-15T14:46:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/168386", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "04f069d9-a04a-4fce-9036-512fb00de162", "content": "https://ift.tt/neZgEm5\nWindows SmartScreen bug exploited to deliver powerful info-stealer (CVE-2023-36025)", "url": "https://t.me/ctinow/168386"}, {"timestamp": "2024-01-15T21:47:59Z", "date_only": false, "value": "2024-01-15T21:47:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/19234", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "31fa0d8b-8bbb-40e8-b2f3-cbf472814800", "content": "\u200aWindows SmartScreen flaw exploited to drop Phemedrone malware\n\nA Phemedrone information-stealing malware campaign exploits a Microsoft Defender SmartScreen vulnerability (CVE-2023-36025) to bypass Windows security prompts when opening URL files. [...]\n\nhttps://www.bleepingcomputer.com/news/security/windows-smartscreen-flaw-exploited-to-drop-phemedrone-malware/", "url": "https://t.me/BleepingComputer/19234", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-01-16T08:16:56Z", "date_only": false, "value": "2024-01-16T08:16:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/4406", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "40a5a7a7-92d6-4bd7-8766-2684dee350d9", "content": "\u26a0\ufe0f Windows users, beware! \n \nCybercriminals are weaponizing the CVE-2023-36025 Windows vulnerability to deploy \"Phemedrone Stealer,\" an open-source data stealer, that targets browsers, crypto wallets, and chat apps. \n \nLearn more: https://thehackernews.com/2024/01/hackers-weaponize-windows-flaw-to.html", "url": "https://t.me/thehackernews/4406", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-01-16T08:33:18Z", "date_only": false, "value": "2024-01-16T08:33:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/278", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "48ab33e6-3506-4087-b2de-7547f93e8ce8", "content": "\u26a0\ufe0f Windows users, beware! \n \nCybercriminals are weaponizing the CVE-2023-36025 Windows vulnerability to deploy \"Phemedrone Stealer,\" an open-source data stealer, that targets browsers, crypto wallets, and chat apps. \n \nLearn more: https://thehackernews.com/2024/01/hackers-weaponize-windows-flaw-to.html", "url": "https://t.me/tengkorakcybercrewz/278", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-01-16T08:33:18Z", "date_only": false, "value": "2024-01-16T08:33:18.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/3130", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "4dfccc86-2415-4b4f-807d-cb5863c84f06", "content": "\u26a0\ufe0f Windows users, beware! \n \nCybercriminals are weaponizing the CVE-2023-36025 Windows vulnerability to deploy \"Phemedrone Stealer,\" an open-source data stealer, that targets browsers, crypto wallets, and chat apps. \n \nLearn more: https://thehackernews.com/2024/01/hackers-weaponize-windows-flaw-to.html", "url": "https://t.me/tengkorakcybercrewz/3130", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-01-16T08:45:22Z", "date_only": false, "value": "2024-01-16T08:45:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HelangMerahGroup/1742", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "e8423bd5-2b03-46f5-a4bc-557edef9ecc5", "content": "\u26a0\ufe0f Windows users, beware! \n \nCybercriminals are weaponizing the CVE-2023-36025 Windows vulnerability to deploy \"Phemedrone Stealer,\" an open-source data stealer, that targets browsers, crypto wallets, and chat apps. \n \nLearn more: https://thehackernews.com/2024/01/hackers-weaponize-windows-flaw-to.html", "url": "https://t.me/HelangMerahGroup/1742", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-01-16T08:45:22Z", "date_only": false, "value": "2024-01-16T08:45:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HelangMerahGroup/301", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "8517974a-ba48-48e6-a28b-740e1260d44c", "content": "\u26a0\ufe0f Windows users, beware! \n \nCybercriminals are weaponizing the CVE-2023-36025 Windows vulnerability to deploy \"Phemedrone Stealer,\" an open-source data stealer, that targets browsers, crypto wallets, and chat apps. \n \nLearn more: https://thehackernews.com/2024/01/hackers-weaponize-windows-flaw-to.html", "url": "https://t.me/HelangMerahGroup/301", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-01-16T17:37:42Z", "date_only": false, "value": "2024-01-16T17:37:42.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/9795", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "5f4bddbe-74ef-41ff-8e38-793afe832088", "content": "#Malware_analysis\n1. One File, Two Payloads\nhttps://isc.sans.edu/diary/One%20File%2C%20Two%20Payloads/30558\n2. Phemedrone Stealer Campaign\nhttps://www.trendmicro.com/en_us/research/24/a/cve-2023-36025-exploited-for-defense-evasion-in-phemedrone-steal.html", "url": "https://t.me/CyberSecurityTechnologies/9795", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-01-16T20:56:55Z", "date_only": false, "value": "2024-01-16T20:56:55.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/glbKRe3vV4RZBJOpOK8agV-TA1TC43-7PyjeSYZWmtNc_Ts", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "29d464bd-8007-45dc-9ccf-5fb5976f0bd0", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-01-17T16:18:19Z", "date_only": false, "value": "2024-01-17T16:18:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/026e6f72-ed6b-491e-9f18-ad89c156cb61", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "320b825a-2a41-4b56-8690-87fc3b73be07"}, {"timestamp": "2024-01-18T08:40:16Z", "date_only": false, "value": "2024-01-18T08:40:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/anti_malware/16582", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "23d8bd85-f4cb-4e23-8f0a-85938117026e", "content": "\u0417\u0430\u0442\u043e\u0447\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u0434 \u043a\u0440\u0430\u0436\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 Phemedrone \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u0432 \u043d\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438. \u0427\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0442\u0440\u043e\u044f\u043d \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0436\u0435\u0440\u0442\u0432\u044b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Defender SmartScreen (CVE-2023-36025).", "url": "https://t.me/anti_malware/16582", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-01-25T11:42:02Z", "date_only": false, "value": "2024-01-25T11:42:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1gfzyqYNI9-_G3zC9diFZmyK2rlGnUa7SyID4auMqibFbLU", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "3b05e9d8-167b-4d4a-82dd-7b87915feb78", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-01-31T23:00:00Z", "date_only": false, "value": "2024-01-31T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2890", "record": "WID-SEC-W-2023-2890", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2024-02-05T21:55:45Z", "date_only": false, "value": "2024-02-05T21:55:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9917", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "33f11385-c7ec-4bb7-b7a9-2c137d112541", "content": "#exploit\n1. CVE-2023-32233:\nUAF in Netfilter nf_tables when processing batch requests\nhttps://github.com/RogelioPumajulca/TEST-CVE-2023-32233\n\n2. CVE-2023-36025:\nWindows SmartScreen Security Feature Bypass\nhttps://github.com/coolman6942o/-EXPLOIT-CVE-2023-36025", "url": "https://t.me/CyberSecurityTechnologies/9917", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-02-07T19:10:58Z", "date_only": false, "value": "2024-02-07T19:10:58.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/35a3073a-9193-4c4d-9b90-caeb2e44c06a", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "83074e71-52b2-434e-b98b-0f1bb2ee299d"}, {"timestamp": "2024-04-04T14:05:41Z", "date_only": false, "value": "2024-04-04T14:05:41.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5601", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "e4414547-221b-4270-8ca7-d9d45faecbff", "content": "\u0414\u0435\u0440\u0436\u0438\u0441\u044c \u0415\u0432\u0440\u043e\u043f\u0430! \u0422\u0440\u043e\u044f\u043d Mispadu, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0441\u0432\u043e\u0438\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u041b\u0430\u0442\u0438\u043d\u0441\u043a\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0438 \u0438 \u0438\u0441\u043f\u0430\u043d\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b \u0441\u0432\u043e\u044e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0437\u0430 \u0435\u0435 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0438 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0441\u044f \u043d\u0430 \u0418\u0442\u0430\u043b\u0438\u044e, \u041f\u043e\u043b\u044c\u0448\u0443 \u0438 \u0428\u0432\u0435\u0446\u0438\u044e. \n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Morphisec, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u0434 \u0443\u0434\u0430\u0440 \u043f\u043e\u043f\u0430\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0441\u0444\u0435\u0440\u0430\u0445 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432, \u0443\u0441\u043b\u0443\u0433, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0430 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0439, \u044e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0444\u0438\u0440\u043c \u0438 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0433\u0435\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0443\u0433\u0440\u043e\u0437\u044b, \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0430\u0442\u0430\u043a \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u041c\u0435\u043a\u0441\u0438\u043a\u0430.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0431\u044b\u043b\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u044b \u0442\u044b\u0441\u044f\u0447\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0430\u043f\u0440\u0435\u043b\u044f 2023 \u0433\u043e\u0434\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0445 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u0435\u0439.\n\nMispadu, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u0430\u043a URSA, \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b \u0437\u0430\u043c\u0435\u0447\u0435\u043d \u0432 2019 \u0433\u043e\u0434\u0443, \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u043a\u0440\u0430\u0436\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0435\u0439 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043e\u0431\u043c\u0430\u043d\u043a\u0443 \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0432\u0441\u043f\u043b\u044b\u0432\u0430\u044e\u0449\u0438\u043c\u0438 \u043e\u043a\u043d\u0430\u043c\u0438.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 Delphi \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0434\u0435\u043b\u0430\u0442\u044c \u0441\u043d\u0438\u043c\u043a\u0438 \u044d\u043a\u0440\u0430\u043d\u0430 \u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043d\u0430\u0436\u0430\u0442\u0438\u044f \u043a\u043b\u0430\u0432\u0438\u0448. \u041e\u0431\u044b\u0447\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0430\u043c-\u043f\u0438\u0441\u044c\u043c\u0430.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b Windows SmartScreen (CVE-2023-36025, CVSS: 8.8) \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u041c\u0435\u043a\u0441\u0438\u043a\u0435.\n\n\u0421\u0445\u0435\u043c\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f, \u043d\u043e \u0442\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 PDF-\u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u043f\u0438\u0441\u044c\u043c\u0430\u0445 \u0441 \u0442\u0435\u043c\u043e\u0439 \u0441\u0447\u0435\u0442\u0430-\u0444\u0430\u043a\u0442\u0443\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u044e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043f\u043e \u0437\u0430\u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0441\u0447\u0435\u0442\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0435 \u0430\u0440\u0445\u0438\u0432\u0430 ZIP.\n\n\u0412 \u0430\u0440\u0445\u0438\u0432\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a MSI \u0438\u043b\u0438 \u0441\u043a\u0440\u0438\u043f\u0442 HTA, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u043d\u0430 Visual Basic (VBScript) \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0432\u0442\u043e\u0440\u043e\u0439 VBScript, \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 Mispadu \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 AutoIT \u043f\u043e\u0441\u043b\u0435 \u0435\u0433\u043e \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 \u0438 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430. \n\n\u0410\u0442\u0430\u043a\u0438 Mispadu \u0442\u0430\u043a\u0436\u0435 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0432\u0443\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 C2: \u043e\u0434\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0445 \u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e - \u0434\u043b\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 200 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.", "url": "https://t.me/true_secator/5601", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-07-22T14:18:36Z", "date_only": false, "value": "2024-07-22T14:18:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/l8HrqQCUzlXu_1uMegNue6rCf6-Sn9GfDuSkIgNFGZzbX2Y", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "90c6c98e-0714-4c7a-a80e-2d117950635b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-07-22T18:19:15Z", "date_only": false, "value": "2024-07-22T18:19:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/JYYq_NE_QRTP0mmwpmj5_oSMR5qGgan6gTVp_opsPNLdoCM", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "11d4ff7b-cf00-4215-be94-9cc9cf17c782", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-02T16:37:41.259Z", "date_only": false, "value": "2024-08-02T16:37:41.259Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-36025", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-06T17:54:30Z", "date_only": false, "value": "2024-08-06T17:54:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/5416", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "11cd6933-002d-4dea-81aa-096716ec3e41", "content": "\u034f\u0424\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0438\u0439 PatchTuesday \u043e\u0442 Microsoft \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f 73 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 5 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 2 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 0-day, \u0430 \u0442\u0430\u043a\u0436\u0435 6 - Microsoft Edge \u0438 1 - Mariner.\n\n\u0415\u0441\u043b\u0438 \u043f\u043e \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u043c, \u0442\u043e 16 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 3 - \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 30 - RCE, 5 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 9 - DoS \u0438 10 - \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u043e\u043c.\n\n\u041f\u043e\u043b\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u0438\u0437 \u043d\u0438\u0445 \u0438 \u0441\u0438\u0441\u0442\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 - \u0437\u0434\u0435\u0441\u044c.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 0-day \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u042d\u0440\u0438\u043a\u043e\u043c \u041b\u043e\u0443\u0440\u0435\u043d\u0441\u0435\u043c\u00a0\u0438\u0437 Microsoft \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-21351, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows SmartScreen.\n\n\u0410\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0438 \u0443\u0431\u0435\u0434\u0438\u0442\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0435\u0433\u043e, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 SmartScreen.\n\n\u041a\u0430\u043a \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a \u0438 \u043a\u0430\u043a\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0435\u0435, Microsoft \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2024-21412\u00a0\u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f Mark of the Web (MoTW) \u0432 Windows, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u043c\u044b\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Microsoft, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Windows Server 2019, Server 2022, Windows 10 \u0438 11.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e: Zero Day Initiative Trend Micro, Aura Information Security \u0438 \u0433\u0440\u0443\u043f\u043f\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google.\n\n\u041a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438 Trend Micro, CVE-2024-21412 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 APT-\u0433\u0440\u0443\u043f\u043f\u043e\u0439 DarkCasino (Water Hydra), \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0442\u0440\u0435\u0439\u0434\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e DarkMe \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0433\u0440\u0430\u0444\u0438\u043a \u0430\u043a\u0446\u0438\u0439, \u0441\u0441\u044b\u043b\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u043d\u0430 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0439 \u0442\u0440\u0435\u0439\u0434\u0435\u0440\u0441\u043a\u0438\u0439 \u0441\u0430\u0439\u0442 (fxbulls[.]ru), \u0432\u044b\u0434\u0430\u044e\u0449\u0438\u0439 \u0441\u0435\u0431\u044f \u0437\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0444\u043e\u0440\u0435\u043a\u0441-\u0431\u0440\u043e\u043a\u0435\u0440\u0430 (fxbulls[.]com).\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u044d\u0442\u0430\u043f\u0430\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0435\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0446\u0435\u043b\u044c \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f ransomware.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 (IoC) \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 DarkMe \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u00a0\u0437\u0434\u0435\u0441\u044c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0432\u0448\u0438\u0435 \u0437\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 Trend Micro \u043f\u0440\u0438\u0448\u043b\u0438 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e CVE-2024-21412 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0434\u0440\u0443\u0433\u043e\u0439 0-day \u0432 Defender SmartScreen (CVE-2023-36025), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u043e\u043a\u0430 DarkCasino \u043e\u0440\u0443\u0434\u0443\u0435\u0442 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043a\u0440\u0438\u0432\u043e\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Windows \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u043f\u0430\u0442\u0447 \u043e\u0442 Microsoft \ud83d\udc47", "url": "https://t.me/true_secator/5416", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-15T15:41:52Z", "date_only": false, "value": "2024-08-15T15:41:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2024/8/14/cve-2024-38213-copy2pwn-exploit-evades-windows-web-protections", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "88394dd2-ab6e-4ba7-aa67-bdb26eb7d3e2", "url": "https://www.thezdi.com/blog/2024/8/14/cve-2024-38213-copy2pwn-exploit-evades-windows-web-protections"}, {"timestamp": "2024-08-16T08:53:00Z", "date_only": false, "value": "2024-08-16T08:53:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/2134", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "53ce621d-9629-4b77-b723-5cf2d7fa864a", "content": "#exploit\n1. CVE-2023-49314:\nAsana Desktop 2.1.0 (macOS) allows code injection because of specific Electron Fuses\nhttps://github.com/louiselalanne/CVE-2023-49314\n\n2. CVE-2023-36025:\nWindows SmartScreen Security Feature Bypass Vulnerability\nhttps://github.com/J466Y/test_CVE-2023-36025", "url": "https://t.me/Rootsec_2/2134", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-16T09:13:18Z", "date_only": false, "value": "2024-08-16T09:13:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/2720", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "d964814c-dd82-467a-b3cf-3828d0acc44e", "content": "#exploit\n1. CVE-2023-32233:\nUAF in Netfilter nf_tables when processing batch requests\nhttps://github.com/RogelioPumajulca/TEST-CVE-2023-32233\n\n2. CVE-2023-36025:\nWindows SmartScreen Security Feature Bypass\nhttps://github.com/coolman6942o/-EXPLOIT-CVE-2023-36025", "url": "https://t.me/Rootsec_2/2720", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-19T19:02:26Z", "date_only": false, "value": "2024-08-19T19:02:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/6107", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "71679ac8-febb-4194-8630-924566084041", "content": "Check Point \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 OpSec \u0432 \u043d\u043e\u0432\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u041f\u041e Styx Stealer, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0438 \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0438\u0442\u044c \u0435\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430, \u0442\u0443\u0440\u0435\u0446\u043a\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u0430 Sty1x.\n\n\u0412\u0441\u0435 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e Check Point \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0434\u043d\u043e\u0439 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u041f\u041e, \u043a\u043e\u0440\u043d\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0442\u044f\u043d\u0443\u0442\u0441\u044f \u043e\u0442\u00a0Phemedrone Stealer.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0441\u0442\u0430\u043b \u0438\u0437\u0432\u0435\u0441\u0442\u0435\u043d \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 2024 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u043d\u0430\u0447\u0430\u043b \u0448\u0438\u0440\u043e\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0442\u044c\u0441\u044f \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-36025 \u0432 Microsoft Windows Defender SmartScreen.\n\nPhemedrone \u043a\u043e\u0433\u0434\u0430-\u0442\u043e \u0431\u044b\u043b \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043d\u0430 GitHub, \u043d\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0431\u044b\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u044b, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0444\u043e\u0440\u043a\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f Styx Stealer, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u043c\u044b\u0439 \u043d\u0430 styxcrypter[.]com.\n\nStyx Stealer - \u044d\u0442\u043e \u043c\u043e\u0449\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0435 \u043a\u0440\u0430\u0441\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u0444\u0430\u0439\u043b\u044b cookie \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0438\u0437 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u0431\u0430\u0437\u0435 Chromium \u0438 Gecko, \u0438\u0437 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 Telegram \u0438 Discord.\n\n\u041e\u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e\u0431 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0439 IP-\u0430\u0434\u0440\u0435\u0441, \u0438 \u043c\u043e\u0436\u0435\u0442 \u0434\u0435\u043b\u0430\u0442\u044c \u0441\u043d\u0438\u043c\u043a\u0438 \u044d\u043a\u0440\u0430\u043d\u0430, \u0447\u0442\u043e\u0431\u044b \u043b\u0443\u0447\u0448\u0435 \u043f\u043e\u043d\u044f\u0442\u044c \u0441\u0440\u0435\u0434\u0443, \u043f\u0435\u0440\u0435\u0434 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\nStyx Stealer, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u043e\u0441\u043d\u043e\u0432\u0430\u043d \u043d\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u0441\u0442\u0430\u0440\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Phemedrone Stealer.\n\n\u041e\u0442\u043a\u0443\u0434\u0430 \u0443\u043d\u0430\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u044b \u0432\u0441\u0435 \u044d\u0442\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u043d\u043e \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \n\u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\u043c\u0438.\n\nStyx Stealer \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0435 \u2014 $75 \u0437\u0430 \u0435\u0436\u0435\u043c\u0435\u0441\u044f\u0447\u043d\u0443\u044e \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u044e, $230 \u0437\u0430 \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430 \u0438 $350 \u0437\u0430 \u043f\u043e\u0436\u0438\u0437\u043d\u0435\u043d\u043d\u0443\u044e \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0443.\u00a0\n\n\u0420\u0435\u043a\u043b\u0430\u043c\u0430 \u0441\u0442\u0438\u043b\u0435\u0440\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2024 \u0433\u043e\u0434\u0430, \u0447\u0442\u043e \u0441\u043e\u0432\u043f\u0430\u043b\u043e \u0441 \u0437\u0430\u043f\u0443\u0441\u043a\u043e\u043c \u0441\u0430\u0439\u0442\u0430 styxcrypter[.]com.\n\n\u0412 \u043c\u0430\u0440\u0442\u0435 2024 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043f\u0430\u043c-\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0443\u044e \u043d\u0430 \u0435\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0430\u0440\u0445\u0438\u0432 TAR \u0441 Agent Tesla.\n\n\u041e\u043d \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b API Telegram Bot \u0434\u043b\u044f \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0432\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0442\u043e\u043a\u0435\u043d Telegram Bot \u0438\u0437 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0412 \u0445\u043e\u0434\u0435 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0431\u043e\u0442\u0430 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0442\u0438\u043f\u0438\u0447\u043d\u043e\u0439 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043e\u0442\u0447\u0435\u0442\u0430 Agent Tesla.\n\n\u0414\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0430\u0440\u0445\u0438\u0432\u043e\u043c, \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e Phemedrone Stealer, \u043d\u043e \u0441 \u0434\u0440\u0443\u0433\u0438\u043c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 Styx Stealer.\n\n\u0420\u0430\u0437\u043c\u043e\u0442\u0430\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443, \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a Styx Stealer \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043b \u0444\u0430\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0438 \u0441\u043b\u0438\u043b \u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u043e \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u043e\u0442\u043b\u0430\u0434\u0438\u0432 \u0441\u0442\u0438\u043b\u043b\u0435\u0440 \u043d\u0430 \u0441\u0432\u043e\u0435\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0442\u043e\u043a\u0435\u043d\u0430 \u0431\u043e\u0442\u0430 Telegram, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c, \u0443\u0447\u0430\u0441\u0442\u0432\u043e\u0432\u0430\u0432\u0448\u0438\u043c \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 Agent Tesla.\n\n\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0435\u043c \u0440\u0430\u0437\u0432\u0435\u0434\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 54 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 Agent Tesla.", "url": "https://t.me/true_secator/6107"}, {"timestamp": "2024-08-20T21:17:24Z", "date_only": false, "value": "2024-08-20T21:17:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a167352e-ca18-4ea3-905d-7dec3b2d649c", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "c83ab8e3-fcc0-4e2f-82c1-824f47979af3"}, {"timestamp": "2024-12-24T20:35:40.394Z", "date_only": false, "value": "2024-12-24T20:35:40.394803Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971921", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "7aee5fe0-3924-4ac4-9066-5e23c72a6cf2", "url": "https://feedsin.space/feed/CISAKevBot/items/2971921"}, {"timestamp": "2025-01-07T21:40:29.838Z", "date_only": false, "value": "2025-01-07T21:40:29.838034Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-36025", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-07T21:40:29.838Z", "date_only": false, "value": "2025-01-07T21:40:29.838034Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36025", "record": "FKIE_CVE-2023-36025", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-01-07T22:38:35Z", "date_only": false, "value": "2025-01-07T22:38:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/592", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "2baf6bbe-9272-4c3e-a501-0445e06ccbd7", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-36025\n\ud83d\udd39 Description: Windows SmartScreen Security Feature Bypass Vulnerability\n\ud83d\udccf Published: 2023-11-14T17:57:39.104Z\n\ud83d\udccf Modified: 2025-01-07T21:41:51.812Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36025", "url": "https://t.me/DarkWebInformer_CVEAlerts/592"}, {"timestamp": "2025-01-08T16:07:59Z", "date_only": false, "value": "2025-01-08T16:07:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.thezdi.com/blog/2025/1/8/zdi-threat-hunting-2024-highlights-trends-amp-challenges", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "e8c1c845-eb8f-4539-babc-68f3ea7d0973", "url": "https://www.thezdi.com/blog/2025/1/8/zdi-threat-hunting-2024-highlights-trends-amp-challenges"}, {"timestamp": "2025-01-27T06:59:50.503Z", "date_only": false, "value": "2025-01-27T06:59:50.503610Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redvello.bsky.social/post/3lgpejmauvc2w", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "a67fbb32-4717-4917-bcbb-aa17d0a0a326", "url": "https://bsky.app/profile/redvello.bsky.social/post/3lgpejmauvc2w"}, {"timestamp": "2025-02-23T02:10:49Z", "date_only": false, "value": "2025-02-23T02:10:49.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "fb956b3b-411e-4411-81ff-9a458b8e7eef"}, {"timestamp": "2025-04-29T23:34:11.331Z", "date_only": false, "value": "2025-04-29T23:34:11.331Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-04-30T00:12:35Z", "date_only": false, "value": "2025-04-30T00:12:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13952", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "b1ab7977-1e2c-4d12-b08e-d2f8b6d2dc3a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-36025\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C)\n\ud83d\udd39 Description: Windows SmartScreen Security Feature Bypass Vulnerability\n\ud83d\udccf Published: 2023-11-14T17:57:39.104Z\n\ud83d\udccf Modified: 2025-04-29T23:34:47.472Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36025", "url": "https://t.me/DarkWebInformer_CVEAlerts/13952"}, {"timestamp": "2025-08-31T03:01:01Z", "date_only": false, "value": "2025-08-31T03:01:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "14ec65e0-cfa7-492b-b8db-75a37409c293"}, {"timestamp": "2025-10-09T00:00:07.842Z", "date_only": false, "value": "2025-10-09T00:00:07.842Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2023-36025", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:32.342Z", "date_only": false, "value": "2025-10-21T23:05:32.342Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-36025", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:32.342Z", "date_only": false, "value": "2025-10-21T23:05:32.342Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-36025", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:53Z", "date_only": false, "value": "2025-10-22T00:32:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4JFF-227J-6G3V", "record": "GHSA-4JFF-227J-6G3V", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-02T12:26:46.548Z", "date_only": false, "value": "2026-02-02T12:26:46.548580Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a996d344-b7d6-4411-8b62-58e42ee6c18a", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "5a483e57-1b93-43d8-b16b-2af4f5b0c139", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a996d344-b7d6-4411-8b62-58e42ee6c18a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-06T23:22:28Z", "date_only": false, "value": "2026-02-06T23:22:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/026e6f72-ed6b-491e-9f18-ad89c156cb61", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "df3da7f3-0b40-46f2-be67-f39a7abd0719"}, {"timestamp": "2026-04-10T09:02:58Z", "date_only": false, "value": "2026-04-10T09:02:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/N3mes1s/b5b0b96782b9f832819d2db7c6684f84", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "5602e6fe-0266-43fa-99b8-741b89578a47", "url": "https://gist.github.com/N3mes1s/b5b0b96782b9f832819d2db7c6684f84"}, {"timestamp": "2026-04-13T22:00:00Z", "date_only": false, "value": "2026-04-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2890", "record": "WID-SEC-W-2023-2890", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-04-13T22:00:00Z", "date_only": false, "value": "2026-04-13T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2890", "record": "WID-SEC-W-2023-2890", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-04-14T08:54:18.549Z", "date_only": false, "value": "2026-04-14T08:54:18.549+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2890", "record": "WID-SEC-W-2023-2890", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-04-21T08:36:02Z", "date_only": false, "value": "2026-04-21T08:36:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/shikorido/f4fe82140c5f849bd9fbb44a4451f4de", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "0bbc2475-96b4-4725-857b-7e03164ba2d4", "url": "https://gist.github.com/shikorido/f4fe82140c5f849bd9fbb44a4451f4de"}, {"timestamp": "2026-06-17T06:05:41.527Z", "date_only": false, "value": "2026-06-17T06:05:41.527", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36025", "record": "FKIE_CVE-2023-36025", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:45.707Z", "date_only": false, "value": "2026-06-19T12:46:45.707702Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4504419c-5014-45a9-946a-4b51434b5a4d", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "f4b0cd91-78bb-4824-9237-41226c4ada33", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4504419c-5014-45a9-946a-4b51434b5a4d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-36025", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "8abe9e5d-f450-4570-ad5c-01ad549d709b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:47.990Z", "date_only": false, "value": "2026-06-23T14:05:47.990673Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8abe9e5d-f450-4570-ad5c-01ad549d709b", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "f5646001-9320-4846-9dd9-d30746a50d0b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8abe9e5d-f450-4570-ad5c-01ad549d709b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-06T11:00:12.523Z", "date_only": false, "value": "2026-07-06T11:00:12.523093Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/191", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "542ff0cb-6a23-4684-b643-cf1a297434fd", "content": "DarkGate \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows SmartScreen \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e DarkGate.\n\n\ud83d\udcac \u0414\u0435\u0442\u0430\u043b\u0438:\n\n\u2022 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-21412 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c SmartScreen.\n\u2022 Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u043c \u043f\u0430\u0442\u0447\u0435, \u043d\u043e \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430.\n\u2022 \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0437 TA544 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SmartScreen (CVE-2023-36025) \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 DarkGate.\n\n\ud83d\udc40 DarkGate \u2014 \u044d\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435:\n\n\u2022 \u041a\u0440\u0430\u0434\u0435\u0442 \u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435: \u043f\u0430\u0440\u043e\u043b\u0438, \u043d\u043e\u043c\u0435\u0440\u0430 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0445 \u043a\u0430\u0440\u0442, \u043b\u0438\u0447\u043d\u044b\u0435 \u0444\u043e\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f.\n\u2022 \u0423\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0444\u0438\u043d\u0430\u043d\u0441\u0430\u043c: \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0434\u0435\u043d\u0435\u0433.\n\u2022 \u041c\u043e\u0436\u0435\u0442 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0430\u0448 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440: DarkGate \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0432\u0437\u044f\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c, \u0434\u0435\u043b\u0430\u044f \u0435\u0433\u043e \u043d\u0435\u043f\u0440\u0438\u0433\u043e\u0434\u043d\u044b\u043c \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udd25 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438:\n\n\u2022 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows: \u0443\u0431\u0435\u0434\u0438\u0442\u0435\u0441\u044c, \u0447\u0442\u043e \u0432\u0430\u0448 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u0437\u0430\u0449\u0438\u0449\u0435\u043d \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0438\u043c \u043f\u0430\u0442\u0447\u0435\u043c.\n\u2022 \u0411\u0443\u0434\u044c\u0442\u0435 \u0431\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b: \u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0439\u0442\u0435 PDF-\u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\u2022 \u0421\u043a\u0430\u0447\u0438\u0432\u0430\u0439\u0442\u0435 \u041f\u041e \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432: \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b \u0438\u043b\u0438 \u043f\u0438\u0440\u0430\u0442\u0441\u043a\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\u2022 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0435 \u041f\u041e: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441 \u0438 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 \u0435\u0433\u043e.\n\n\u0411\u0443\u0434\u044c\u0442\u0435 \u0431\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b, \u0441\u043b\u0435\u0434\u0438\u0442\u0435 \u0437\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u0438\u0442\u044c \u0441\u0435\u0431\u044f \u043e\u0442 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a.\n\n#DarkGate #Windows #SmartScreen #ZeroDay\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/191"}, {"timestamp": "2026-07-06T11:00:14.966Z", "date_only": false, "value": "2026-07-06T11:00:14.966003Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/94", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "75902a70-c854-4cb9-85d2-c3b102da0f9f", "content": "Windows \u0432 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 SmartScreen\n\n\u26a1\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-36025 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 Microsoft.\n\n\u26a1\ufe0f \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 SmartScreen \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Windows.\n\n\u26a1\ufe0f \u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 TA544 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0439 \u0442\u0440\u043e\u044f\u043d Ursnif (Gozi) \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430 WikiLoader.\n\n#Windows #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c #SmartScreen\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/94"}, {"timestamp": "2026-07-06T11:00:15.115Z", "date_only": false, "value": "2026-07-06T11:00:15.115073Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/87", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "a2c6a24e-8278-4258-8ae1-d453372a8898", "content": "Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 58 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438\n\n\ud83d\udd14 14 \u043d\u043e\u044f\u0431\u0440\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u00abPatch Tuesday\u00bb, \u0446\u0435\u043b\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 58 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u043c \u0441 \u043d\u0438\u043c \u041f\u041e.\n\n\ud83d\udd14 \u0421\u0440\u0435\u0434\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0442\u0440\u0438 zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-36025, CVE-2023-36033, CVE-2023-36036), \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b SmartScreen, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 DWM Core Library \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 Windows Cloud Files Mini Filter Driver.\n\n\ud83d\udd14 \u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0443\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-36439 \u0432 Exchange, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Exchange, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0439 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n#Microsoft #CyberSecurity #PatchTuesday #ZeroDay\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/87"}, {"timestamp": "2026-07-12T01:00:03.809Z", "date_only": false, "value": "2026-07-12T01:00:03.809539Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/191", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "39209876-c721-4325-985d-7f6aa15c1fd2", "content": "DarkGate \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Windows SmartScreen \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e DarkGate.\n\n\ud83d\udcac \u0414\u0435\u0442\u0430\u043b\u0438:\n\n\u2022 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-21412 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c SmartScreen.\n\u2022 Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u043c \u043f\u0430\u0442\u0447\u0435, \u043d\u043e \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430.\n\u2022 \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0437 TA544 \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SmartScreen (CVE-2023-36025) \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 DarkGate.\n\n\ud83d\udc40 DarkGate \u2014 \u044d\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435:\n\n\u2022 \u041a\u0440\u0430\u0434\u0435\u0442 \u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435: \u043f\u0430\u0440\u043e\u043b\u0438, \u043d\u043e\u043c\u0435\u0440\u0430 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0445 \u043a\u0430\u0440\u0442, \u043b\u0438\u0447\u043d\u044b\u0435 \u0444\u043e\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f.\n\u2022 \u0423\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0444\u0438\u043d\u0430\u043d\u0441\u0430\u043c: \u0445\u0430\u043a\u0435\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0434\u0435\u043d\u0435\u0433.\n\u2022 \u041c\u043e\u0436\u0435\u0442 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0430\u0448 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440: DarkGate \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0432\u0437\u044f\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c, \u0434\u0435\u043b\u0430\u044f \u0435\u0433\u043e \u043d\u0435\u043f\u0440\u0438\u0433\u043e\u0434\u043d\u044b\u043c \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udd25 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438:\n\n\u2022 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Windows: \u0443\u0431\u0435\u0434\u0438\u0442\u0435\u0441\u044c, \u0447\u0442\u043e \u0432\u0430\u0448 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u0437\u0430\u0449\u0438\u0449\u0435\u043d \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0438\u043c \u043f\u0430\u0442\u0447\u0435\u043c.\n\u2022 \u0411\u0443\u0434\u044c\u0442\u0435 \u0431\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b: \u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0439\u0442\u0435 PDF-\u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\u2022 \u0421\u043a\u0430\u0447\u0438\u0432\u0430\u0439\u0442\u0435 \u041f\u041e \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432: \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b \u0438\u043b\u0438 \u043f\u0438\u0440\u0430\u0442\u0441\u043a\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438.\n\u2022 \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0435 \u041f\u041e: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441 \u0438 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 \u0435\u0433\u043e.\n\n\u0411\u0443\u0434\u044c\u0442\u0435 \u0431\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b, \u0441\u043b\u0435\u0434\u0438\u0442\u0435 \u0437\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b, \u0447\u0442\u043e\u0431\u044b \u043e\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u0438\u0442\u044c \u0441\u0435\u0431\u044f \u043e\u0442 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a.\n\n#DarkGate #Windows #SmartScreen #ZeroDay\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/191", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-12T04:00:04.230Z", "date_only": false, "value": "2026-07-12T04:00:04.230617Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/87", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "7cfca270-9b9b-4839-b573-2319681fd34d", "content": "Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 58 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438\n\n\ud83d\udd14 14 \u043d\u043e\u044f\u0431\u0440\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u00abPatch Tuesday\u00bb, \u0446\u0435\u043b\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 58 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Windows \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u043c \u0441 \u043d\u0438\u043c \u041f\u041e.\n\n\ud83d\udd14 \u0421\u0440\u0435\u0434\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0442\u0440\u0438 zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-36025, CVE-2023-36033, CVE-2023-36036), \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b SmartScreen, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 DWM Core Library \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 Windows Cloud Files Mini Filter Driver.\n\n\ud83d\udd14 \u041e\u0441\u043e\u0431\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0443\u0434\u0435\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-36439 \u0432 Exchange, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Exchange, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0439 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n#Microsoft #CyberSecurity #PatchTuesday #ZeroDay\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/87", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-12T04:00:04.486Z", "date_only": false, "value": "2026-07-12T04:00:04.486270Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/94", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "455324fa-3cdc-455c-acfd-5736463781ec", "content": "Windows \u0432 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 SmartScreen\n\n\u26a1\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-36025 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 Microsoft.\n\n\u26a1\ufe0f \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 SmartScreen \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Windows.\n\n\u26a1\ufe0f \u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 TA544 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0439 \u0442\u0440\u043e\u044f\u043d Ursnif (Gozi) \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430 WikiLoader.\n\n#Windows #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c #SmartScreen\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/94", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-17T11:00:07.033Z", "date_only": false, "value": "2026-07-17T11:00:07.033912Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/208", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "6df7fff9-e019-4eab-a3d3-f55aa96b6a4f", "content": "https://github.com/J466Y/test_CVE-2023-36025", "url": "https://t.me/cyberwarehouse/208"}, {"timestamp": "2026-07-18T00:00:28.605Z", "date_only": false, "value": "2026-07-18T00:00:28.605792Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/208", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "e70cf3a0-a0f1-40ab-a7ee-36d2e1f0843d", "content": "https://github.com/J466Y/test_CVE-2023-36025", "url": "https://t.me/cyberwarehouse/208", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T02:02:00.403Z", "date_only": false, "value": "2026-07-26T02:02:00.403013Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3465", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "1456c220-2465-41f2-940b-89e23cd6526e", "content": "Rapid7 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u043e\u0439 \u0443\u0433\u0440\u043e\u0437, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0438\u0441\u044c \u0432 2024 \u0433\u043e\u0434\u0443\n\n\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Rapid7 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u0447\u0435\u0442 \u043e \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0435 \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437 \u0437\u0430 2024 \u0433\u043e\u0434.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438:\n\n1. \u0412 2024 \u0433\u043e\u0434\u0443 \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c 33 \u043d\u043e\u0432\u044b\u0445 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438, \u043e\u043f\u0435\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430\u043c\u0438-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u0430 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e 75 \u0442\u0430\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 Rapid \u0432\u044b\u0434\u0435\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c RansomHub, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043b\u044e\u0431\u044b\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430 \u0434\u043e\u043b\u044e \u043e\u0442 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 (\u043c\u043e\u0434\u0435\u043b\u044c Ransome-as-a-Service, Raas). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 RansomHub \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 573 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u0442\u0435\u0447\u043a\u0430\u0445, \u0447\u0442\u043e \u0432\u044b\u0432\u0435\u043b\u043e \u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c \u0432 \u0434\u0435\u0441\u044f\u0442\u043e\u043a \u0441\u0430\u043c\u044b\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445, \u043e\u043d\u0430 \u0443\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0442\u043e\u043b\u044c\u043a\u043e LockBit.\n\n\u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u0433\u043d\u0443\u0448\u0430\u044e\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 \u0441\u0444\u0435\u0440\u0443 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0434\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u0447\u0438\u0442\u0430\u0432\u0448\u0443\u044e\u0441\u044f \u043d\u0435\u043f\u0440\u0438\u0435\u043c\u043b\u0435\u043c\u043e\u0439 \u0446\u0435\u043b\u044c\u044e. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 Qilin \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0438 50 \u043c\u043b\u043d \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0443 \u043b\u043e\u043d\u0434\u043e\u043d\u0441\u043a\u0438\u0445 \u0431\u043e\u043b\u044c\u043d\u0438\u0446 \u0437\u0430 \u043d\u0435\u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044e \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0438\u0445 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u0431\u0435\u0433\u0430\u044e\u0442 \u043a \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438, \u043f\u0440\u0438\u0447\u0435\u043c \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u044d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d \u043d\u0430 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0441\u043b\u0443\u0436\u0431 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438.\n\n3. \u0421\u0440\u0435\u0434\u0438 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c Rapid7 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442 SocGholish, GootLoader \u0438 AsyncRAT, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0411\u043e\u043b\u0435\u0435 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0438 (28%) \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Rapid7 \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u044d\u0442\u0438\u0445 \u0442\u0440\u0435\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c.\n\n4. \u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u2013 \u044d\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (17%) \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0431\u0435\u0437 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (56%). \u0427\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043b\u043e \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 MFA \u0432 \u0442\u0430\u043a\u0438\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445, \u043a\u0430\u043a VPN, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u0441\u0442\u043e\u043b\u043e\u0432 (VDI). \n\n\u0427\u0442\u043e \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0442\u043e \u0441\u0430\u043c\u044b\u043c\u0438 \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u043b\u0438:\n- CVE-2024-3400 \u0432 Palo Alto Networks PAN-OS;\n- CVE-2024-24919 \u0432 Check Point Security Gateways;\n- CVE-2024-1709 \u0432 ConnectWise ScreenConnect;\n- CVE-2023-48788 \u0432 Fortinet FortiClient;\n- CVE-2023-48365 \u0432 Qlik Sense Enterprise \u0434\u043b\u044f Windows;\n- CVE-2023-36025 \u0432 Windows SmartScreen;\n- CVE-2020-14882 \u0432 Oracle WebLogic Server (Oracle Fusion Middleware);\n- CVE-2018-15961 \u0432 Adobe ColdFusion.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 Rapid7.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.rapid7.com/blog/post/2024/12/16/2024-threat-landscape-statistics-ransomware-activity-vulnerability-exploits-and-attack-trends/ \n\n#\u043e\u0442\u0447\u0435\u0442 #\u0418\u0411 #\u0442\u0440\u0435\u043d\u0434\u044b", "url": "https://t.me/EchelonEyes/3465"}, {"timestamp": "2026-07-26T02:02:11.783Z", "date_only": false, "value": "2026-07-26T02:02:11.783606Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2640", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "82225192-9e54-4a4a-bc0d-8e5e98dd59e5", "content": "Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Windows \u0432 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u043c \u043f\u0430\u0442\u0447\u0435\n\n\u0422\u0435\u0445\u0433\u0438\u0433\u0430\u043d\u0442 Microsoft \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 149 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u0435\u0436\u0435\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438, \u0441\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 3 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 142 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435. \u0422\u0430\u043a\u0436\u0435 \u0441\u043f\u0438\u0441\u043e\u043a \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \n\n\u041f\u0435\u0440\u0432\u044b\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-26234. \u0425\u043e\u0442\u044f \u0432 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 Microsoft \u043d\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e CVE-2024-26234, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Sophos \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b (\u00abCatalog.exe\u00bb \u0438\u043b\u0438 \u00abCatalog Authentication Client Service\u00bb), \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043a\u043e\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u043c WHCP.\n\n\u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u0440\u0430\u043d\u0435\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u043e\u0441\u044c \u0432 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0441 \u043c\u0430\u0440\u043a\u0435\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c LaiXi Android Screen Mirroring. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0432\u0435\u0440\u0435\u043d\u044b, \u0447\u0442\u043e \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440. \n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Redmond \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-29988. \u0422\u0430\u043a \u0436\u0435, \u043a\u0430\u043a \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0440\u0430\u043d\u0435\u0435 CVE-2024-21412 \u0438 CVE-2023-36025, \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 Microsoft Defender Smartscreen \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c ZDI, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows \u043f\u043e\u0441\u043b\u0435 \u0443\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f EDR/NDR \u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 Mark of the Web (MotW). \n\n\u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e CVE-2024-29988 \u0432\u0437\u044f\u043b\u0430 \u043d\u0430 \u0432\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e \u043c\u043e\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Water Hydra \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0439 \u0440\u044b\u043d\u043e\u043a Forex \u0438 Telegram-\u043a\u0430\u043d\u0430\u043b\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0435\u0439 \u0430\u043a\u0446\u0438\u044f\u043c\u0438. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://msrc.microsoft.com/update-guide/releaseNote/2024-Apr \n\n#Microsoft #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "url": "https://t.me/EchelonEyes/2640"}, {"timestamp": "2026-07-26T02:02:12.659Z", "date_only": false, "value": "2026-07-26T02:02:12.659350Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2556", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "abe0c4a4-1d18-4c39-87c8-240491a4babe", "content": "\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e DarkGate \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft\n\n\u041d\u043e\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e DarkGate \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SmartScreen Windows Defender \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f. \u041e\u0431 \u044d\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Trend Micro. \u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430\u0441\u044c \u0435\u0449\u0435 \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430, \u0442\u043e \u0435\u0441\u0442\u044c \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-21412 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,1) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u044f\u0440\u043b\u044b\u043a\u043e\u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 SmartScreen, \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u0436\u0435\u0440\u0442\u0432\u0443 \u0449\u0435\u043b\u043a\u043d\u0443\u0442\u044c \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2024 \u0433\u043e\u0434\u0430, \u043d\u043e \u043d\u0435 \u0440\u0430\u043d\u044c\u0448\u0435, \u0447\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a Water Hydra (\u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u0430\u043a DarkCasino) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0435\u0435 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e DarkMe \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Trend Micro \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u043e, \u0447\u0435\u043c \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435: \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f DarkGate \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0435\u0435 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0438\u0437 Google Ads \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0421\u043b\u043e\u0436\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0436\u0435\u0440\u0442\u0432\u044b \u043d\u0430\u0436\u0438\u043c\u0430\u044e\u0442 \u043d\u0430 \u0441\u0441\u044b\u043b\u043a\u0443, \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432\u043e \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435 PDF, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0435 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e. \u0421\u0441\u044b\u043b\u043a\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0435 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0434\u043e\u043c\u0435\u043d\u0430 Google Doubleclick[.]net \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u044f\u0440\u043b\u044b\u043a\u0430 .URL.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Microsoft (.MSI), \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u043f\u043e\u0434 \u0437\u0430\u043a\u043e\u043d\u043d\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435, \u0442\u0430\u043a\u043e\u0435 \u043a\u0430\u043a Apple iTunes, Notion, NVIDIA. \u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0438 \u043e\u0441\u043d\u0430\u0449\u0435\u043d\u044b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u043c \u043d\u0435\u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0440\u0430\u0436\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 DarkGate, \u0432\u0435\u0440\u0441\u0438\u0438 6.1.7.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0432 Windows SmartScreen (CVE-2023-36025, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 DarkGate, Phemedrone Stealer \u0438 Mispadu.\n\n\u0417\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f\u043c\u0438 Google Ads \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u043e\u0445\u0432\u0430\u0442 \u0438 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439, \u0430\u0434\u0430\u043f\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u0430\u0443\u0434\u0438\u0442\u043e\u0440\u0438\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.trendmicro.com/en_us/research/24/c/cve-2024-21412--darkgate-operators-exploit-microsoft-windows-sma.html \n\n#\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435\u041f\u041e #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "url": "https://t.me/EchelonEyes/2556"}, {"timestamp": "2026-07-26T02:02:18.995Z", "date_only": false, "value": "2026-07-26T02:02:18.995196Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2167", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "f2dbed20-909c-4204-8512-e4d77645293f", "content": "Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u043f\u0430\u0442\u0447\u0435\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 63 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0418\u0437 63 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 56 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u0442\u0430\u043a\u0436\u0435 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f:\n\n- CVE-2023-36025 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows SmartScreen;\n\n- CVE-2023-36033 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,8) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 DWM Windows, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n\n- CVE-2023-36036 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,8) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043c\u0438\u043d\u0438-\u0444\u0438\u043b\u044c\u0442\u0440\u0430 Windows Cloud Files, \u043f\u043e\u0432\u044b\u0448\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438;\n\n- CVE-2023-36038 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,2) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 ASP.NET, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0442\u043a\u0430\u0437\u043e\u043c \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438;\n\n- CVE-2023-36413 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,5) \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Microsoft Office.\n\n\u0418 CVE-2023-36033, \u0438 CVE-2023-36036 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a CVE-2023-36025 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 Windows Defender SmartScreen \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u044b. \u041f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c Windows \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0439 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0430\u0442\u0430\u043a \u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0440\u0443\u0436\u0438\u044f. \n\nMicrosoft \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 Protected Extensible Authentication Protocol \u0438 Pragmatic General Multicast (CVE-2023-36028 \u0438 CVE-2023-36397, \u043e\u0431\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 9,8).\n\n\u041d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f CVE-2023-38545 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8), \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0435 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 Curl, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 Azure CLI (CVE-2023-36052, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,6).\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://msrc.microsoft.com/update-guide/releaseNote/2023-Nov \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u0432\u0442\u043e\u0440\u043d\u0438\u043a\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439", "url": "https://t.me/EchelonEyes/2167"}, {"timestamp": "2026-07-26T07:01:23.719Z", "date_only": false, "value": "2026-07-26T07:01:23.719761Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/2086", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "c55fe92e-78ac-4e87-9b73-d11ae1379d27", "content": "\ud83d\udd25\u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 CVE-2023-36025 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows SmartScreen, \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Microsoft.\n\n\ud83d\udc7e \u0427\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u0430\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 Windows Defender SmartScreen \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0446\u0435\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 URL\u2013\u0430\u0434\u0440\u0435\u0441 \u0438\u043b\u0438 \u0444\u0430\u0439\u043b \u044f\u0440\u043b\u044b\u043a\u0430 (.URL), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0441\u0441\u044b\u043b\u043a\u0443 \u043d\u0430 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0438\u043b\u0438 \u0430\u0434\u0440\u0435\u0441 \u0438\u043d\u043e\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u043f\u0440\u0438 \u0444\u0438\u0448\u0438\u043d\u0433\u0435.\n\n\u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \n\n\u2757\ufe0f\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f (CVE-2023-36025).\n\n\u26a0\ufe0f \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0443\u0437\u043b\u044b \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 CVE-2023-36025 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e MaxPatrol VM. \u0415\u0441\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u044b \u0437\u043d\u0430\u043d\u0438\u0439, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u044b \u0431\u0443\u0434\u0443\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u044b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438.\n\n@Positive_Technologies\n#\u0432\u0442\u0440\u0435\u043d\u0434\u0435VM", "url": "https://t.me/Positive_Technologies/2086"}, {"timestamp": "2026-07-28T00:00:38.112Z", "date_only": false, "value": "2026-07-28T00:00:38.112337Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/2556", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "e3075219-4287-4f5d-9c4f-8db05b923fe3", "content": "\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e DarkGate \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft\n\n\u041d\u043e\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e DarkGate \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SmartScreen Windows Defender \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f. \u041e\u0431 \u044d\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Trend Micro. \u041a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430\u0441\u044c \u0435\u0449\u0435 \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u044f\u043d\u0432\u0430\u0440\u044f \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0433\u043e\u0434\u0430, \u0442\u043e \u0435\u0441\u0442\u044c \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-21412 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,1) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u044f\u0440\u043b\u044b\u043a\u043e\u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 SmartScreen, \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u0436\u0435\u0440\u0442\u0432\u0443 \u0449\u0435\u043b\u043a\u043d\u0443\u0442\u044c \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2024 \u0433\u043e\u0434\u0430, \u043d\u043e \u043d\u0435 \u0440\u0430\u043d\u044c\u0448\u0435, \u0447\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a Water Hydra (\u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u0430\u043a DarkCasino) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0435\u0435 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e DarkMe \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 Trend Micro \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u043e, \u0447\u0435\u043c \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435: \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f DarkGate \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0435\u0435 \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0438\u0437 Google Ads \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0421\u043b\u043e\u0436\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0436\u0435\u0440\u0442\u0432\u044b \u043d\u0430\u0436\u0438\u043c\u0430\u044e\u0442 \u043d\u0430 \u0441\u0441\u044b\u043b\u043a\u0443, \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u0443\u044e \u0432\u043e \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435 PDF, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0447\u0435\u0440\u0435\u0437 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0435 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e. \u0421\u0441\u044b\u043b\u043a\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0435 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441 \u0434\u043e\u043c\u0435\u043d\u0430 Google Doubleclick[.]net \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u044f\u0440\u043b\u044b\u043a\u0430 .URL.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Microsoft (.MSI), \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u043f\u043e\u0434 \u0437\u0430\u043a\u043e\u043d\u043d\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435, \u0442\u0430\u043a\u043e\u0435 \u043a\u0430\u043a Apple iTunes, Notion, NVIDIA. \u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0438 \u043e\u0441\u043d\u0430\u0449\u0435\u043d\u044b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u043c \u043d\u0435\u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0440\u0430\u0436\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 DarkGate, \u0432\u0435\u0440\u0441\u0438\u0438 6.1.7.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0432 Windows SmartScreen (CVE-2023-36025, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 DarkGate, Phemedrone Stealer \u0438 Mispadu.\n\n\u0417\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f\u043c\u0438 Google Ads \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0442\u044c \u043e\u0445\u0432\u0430\u0442 \u0438 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043a\u043b\u0430\u043c\u043d\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439, \u0430\u0434\u0430\u043f\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u0430\u0443\u0434\u0438\u0442\u043e\u0440\u0438\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.trendmicro.com/en_us/research/24/c/cve-2024-21412--darkgate-operators-exploit-microsoft-windows-sma.html \n\n#\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435\u041f\u041e #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "url": "https://t.me/EchelonEyes/2556", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-28T00:00:39.541Z", "date_only": false, "value": "2026-07-28T00:00:39.541924Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/2640", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "48358a2f-a4e2-41fd-ba4c-1f5b73785ea9", "content": "Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Windows \u0432 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u043c \u043f\u0430\u0442\u0447\u0435\n\n\u0422\u0435\u0445\u0433\u0438\u0433\u0430\u043d\u0442 Microsoft \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 149 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u0435\u0436\u0435\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438, \u0441\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 3 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 142 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435. \u0422\u0430\u043a\u0436\u0435 \u0441\u043f\u0438\u0441\u043e\u043a \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c. \n\n\u041f\u0435\u0440\u0432\u044b\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-26234. \u0425\u043e\u0442\u044f \u0432 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 Microsoft \u043d\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e CVE-2024-26234, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Sophos \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b (\u00abCatalog.exe\u00bb \u0438\u043b\u0438 \u00abCatalog Authentication Client Service\u00bb), \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u043a\u043e\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u043c WHCP.\n\n\u0414\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u043e, \u0447\u0442\u043e \u0440\u0430\u043d\u0435\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u043e\u0441\u044c \u0432 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0441 \u043c\u0430\u0440\u043a\u0435\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c LaiXi Android Screen Mirroring. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0443\u0432\u0435\u0440\u0435\u043d\u044b, \u0447\u0442\u043e \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440. \n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Redmond \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-29988. \u0422\u0430\u043a \u0436\u0435, \u043a\u0430\u043a \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0440\u0430\u043d\u0435\u0435 CVE-2024-21412 \u0438 CVE-2023-36025, \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 Microsoft Defender Smartscreen \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c ZDI, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows \u043f\u043e\u0441\u043b\u0435 \u0443\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f EDR/NDR \u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 Mark of the Web (MotW). \n\n\u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e CVE-2024-29988 \u0432\u0437\u044f\u043b\u0430 \u043d\u0430 \u0432\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e \u043c\u043e\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 Water Hydra \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0439 \u0440\u044b\u043d\u043e\u043a Forex \u0438 Telegram-\u043a\u0430\u043d\u0430\u043b\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0442\u043e\u0440\u0433\u043e\u0432\u043b\u0435\u0439 \u0430\u043a\u0446\u0438\u044f\u043c\u0438. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://msrc.microsoft.com/update-guide/releaseNote/2024-Apr \n\n#Microsoft #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438", "url": "https://t.me/EchelonEyes/2640", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-28T18:00:06.344Z", "date_only": false, "value": "2026-07-28T18:00:06.344616Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Positive_Technologies/2086", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "55a200fa-bf0e-4553-a4a0-05757a350e5c", "content": "\ud83d\udd25\u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u2014 CVE-2023-36025 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Windows SmartScreen, \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c, \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Microsoft.\n\n\ud83d\udc7e \u0427\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u0430\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 Windows Defender SmartScreen \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0446\u0435\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 URL\u2013\u0430\u0434\u0440\u0435\u0441 \u0438\u043b\u0438 \u0444\u0430\u0439\u043b \u044f\u0440\u043b\u044b\u043a\u0430 (.URL), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0441\u0441\u044b\u043b\u043a\u0443 \u043d\u0430 \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0438\u043b\u0438 \u0430\u0434\u0440\u0435\u0441 \u0438\u043d\u043e\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u043f\u0440\u0438 \u0444\u0438\u0448\u0438\u043d\u0433\u0435.\n\n\u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \n\n\u2757\ufe0f\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c \u0432\u0435\u043d\u0434\u043e\u0440\u0430 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f (CVE-2023-36025).\n\n\u26a0\ufe0f \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n\n\u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0443\u0437\u043b\u044b \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 CVE-2023-36025 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e MaxPatrol VM. \u0415\u0441\u043b\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u044b \u0437\u043d\u0430\u043d\u0438\u0439, \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u044b \u0431\u0443\u0434\u0443\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u044b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438.\n\n@Positive_Technologies\n#\u0432\u0442\u0440\u0435\u043d\u0434\u0435VM", "url": "https://t.me/Positive_Technologies/2086", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T12:02:19.761Z", "date_only": false, "value": "2026-07-29T12:02:19.761971Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4203", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "694e7917-30b3-41c3-bad1-f35b362ff2b5", "content": "CVE-2023-36025 Exploited for Defense Evasion in Phemedrone Stealer Campaign https://www.trendmicro.com/en_us/research/24/a/cve-2023-36025-exploited-for-defense-evasion-in-phemedrone-steal.html", "url": "https://t.me/reverseame/4203"}, {"timestamp": "2026-08-02T09:00:04.381Z", "date_only": false, "value": "2026-08-02T09:00:04.381715Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4203", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "abe6b704-bad1-4302-9746-fa1293ca9185", "content": "CVE-2023-36025 Exploited for Defense Evasion in Phemedrone Stealer Campaign https://www.trendmicro.com/en_us/research/24/a/cve-2023-36025-exploited-for-defense-evasion-in-phemedrone-steal.html", "url": "https://t.me/reverseame/4203", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T17:00:06.686Z", "date_only": false, "value": "2026-09-01T17:00:06.686063Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/911", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "3b40be6a-ee70-425a-b6a3-81f2e23853da", "content": "\u26a0\ufe0f\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Windows, \u0431\u0443\u0434\u044c\u0442\u0435 \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u044b! \u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Windows # CVE-2023-36025 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u00abPhemedrone Stealer\u00bb, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b, \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 \u0438 \u0447\u0430\u0442-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\nhttps://www.trendmicro.com/en_us/research/24/a/cve-2023-36025-exploited-for-defense-evasion-in-phemedrone-steal.html", "url": "https://t.me/Hackme_news/911"}, {"timestamp": "2026-09-01T20:00:42.870Z", "date_only": false, "value": "2026-09-01T20:00:42.870597Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/126604", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "c68793d8-a612-4d9a-9881-807218333412", "content": "CVE-2023\u201336025: An In-Depth Analysis of Circumventing Windows SmartScreen Security\n\nIn the world of cybersecurity, the discovery of a vulnerability like CVE-2023-36025 in Windows SmartScreen is a significant event. This\u2026Continue reading on InfoSec Write-ups \u00bb\nRead more...", "url": "https://t.me/hacking_Attack/126604"}, {"timestamp": "2026-09-01T20:00:42.951Z", "date_only": false, "value": "2026-09-01T20:00:42.951136Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/126451", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "1ad68cce-041c-4ef8-bdfe-77ba7c964173", "content": "In the world of cybersecurity, the discovery of a vulnerability like CVE-2023-36025 in Windows SmartScreen is a significant event. This\u2026Continue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/cve-2023-36025-an-in-depth-analysis-of-circumventing-windows-smartscreen-security-6ff05c8b69d0?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/126451"}, {"timestamp": "2026-09-01T20:00:43.214Z", "date_only": false, "value": "2026-09-01T20:00:43.214531Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/126442", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "4e957c13-dd62-4690-872b-45fa719899be", "content": "CVE-2023\u201336025: An In-Depth Analysis of Circumventing Windows SmartScreen Security\n\nIn the world of cybersecurity, the discovery of a vulnerability like CVE-2023-36025 in Windows SmartScreen is a significant event. This\u2026Continue reading on InfoSec Write-ups \u00bb\nRead more...", "url": "https://t.me/hacking_Attack/126442"}, {"timestamp": "2026-09-01T20:00:43.266Z", "date_only": false, "value": "2026-09-01T20:00:43.266519Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/126449", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "73ca7365-9bce-4a67-9fa1-0dc3322e622c", "content": "CVE-2023\u201336025: An In-Depth Analysis of Circumventing Windows SmartScreen Security\nhttps://infosecwriteups.com/cve-2023-36025-an-in-depth-analysis-of-circumventing-windows-smartscreen-security-6ff05c8b69d0?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/126449"}, {"timestamp": "2026-09-04T01:00:04.812Z", "date_only": false, "value": "2026-09-04T01:00:04.812431Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/126449", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "6dce15d3-0360-46c6-a548-2019e338f31a", "content": "CVE-2023\u201336025: An In-Depth Analysis of Circumventing Windows SmartScreen Security\nhttps://infosecwriteups.com/cve-2023-36025-an-in-depth-analysis-of-circumventing-windows-smartscreen-security-6ff05c8b69d0?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/126449", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-04T01:00:05.170Z", "date_only": false, "value": "2026-09-04T01:00:05.170362Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/126451", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "05b7c572-59d1-4929-b6b4-eab7f9db3de3", "content": "In the world of cybersecurity, the discovery of a vulnerability like CVE-2023-36025 in Windows SmartScreen is a significant event. This\u2026Continue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/cve-2023-36025-an-in-depth-analysis-of-circumventing-windows-smartscreen-security-6ff05c8b69d0?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/126451", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-08T00:00:07.214Z", "date_only": false, "value": "2026-09-08T00:00:07.214455Z", "kind": "sighting", "label": "Seen", "source": "Telegram/B-15478wwQOjMOaoaVA0h8pku4eXhSRPXQWjKT1NHNCbCU8", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "9802718a-a131-4692-93c4-40036d55d44c"}, {"timestamp": "2026-09-08T22:00:05.017Z", "date_only": false, "value": "2026-09-08T22:00:05.017747Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Hackme_news/911", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "cdba90a0-d7d4-498b-ae72-191aab58136b", "content": "\u26a0\ufe0f\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Windows, \u0431\u0443\u0434\u044c\u0442\u0435 \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u044b! \u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Windows # CVE-2023-36025 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u00abPhemedrone Stealer\u00bb, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b, \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 \u0438 \u0447\u0430\u0442-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\nhttps://www.trendmicro.com/en_us/research/24/a/cve-2023-36025-exploited-for-defense-evasion-in-phemedrone-steal.html", "url": "https://t.me/Hackme_news/911", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-09T00:00:49.067Z", "date_only": false, "value": "2026-09-09T00:00:49.067743Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/B-15478wwQOjMOaoaVA0h8pku4eXhSRPXQWjKT1NHNCbCU8", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "8153fe95-9f2c-427b-a33e-04a85b5732bc", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "a996d344-b7d6-4411-8b62-58e42ee6c18a", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T10:48:09.586Z", "anchors": {"origin": {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2023-11-28T10:51:36Z", "date_only": false, "value": "2023-11-28T10:51:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5981", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "a985d80f-187f-498d-b590-602a35f8db65", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1atest repo for CVE-2023-36025\nURL\uff1ahttps://github.com/louiselalanne/CVE-2023-49314\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5981", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a996d344-b7d6-4411-8b62-58e42ee6c18a", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": -28800.0, "hours": -8.0, "days": -0.3333333333333333, "min_seconds": -28800.0, "max_seconds": 57600.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a996d344-b7d6-4411-8b62-58e42ee6c18a", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": -28800.0, "hours": -8.0, "days": -0.3333333333333333, "min_seconds": -28800.0, "max_seconds": 57600.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a996d344-b7d6-4411-8b62-58e42ee6c18a", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 1219896.0, "hours": 338.86, "days": 14.119166666666667, "min_seconds": 1219896.0, "max_seconds": 1219896.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-11-28T10:51:36Z", "date_only": false, "value": "2023-11-28T10:51:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5981", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "a985d80f-187f-498d-b590-602a35f8db65", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1atest repo for CVE-2023-36025\nURL\uff1ahttps://github.com/louiselalanne/CVE-2023-49314\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5981", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": 0.0, "max_seconds": 0.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 0.0, "hours": 0.0, "days": 0.0, "min_seconds": 0.0, "max_seconds": 0.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": true, "seconds": 28800.0, "hours": 8.0, "days": 0.3333333333333333, "min_seconds": -57600.0, "max_seconds": 28800.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-11-14T00:00:00Z", "date_only": false, "value": "2023-11-14T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-36025", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a996d344-b7d6-4411-8b62-58e42ee6c18a", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploit_publication_to_patch": {"available": true, "seconds": -1219896.0, "hours": -338.86, "days": -14.119166666666667, "min_seconds": -1219896.0, "max_seconds": -1219896.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2023-11-28T10:51:36Z", "date_only": false, "value": "2023-11-28T10:51:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5981", "record": "CVE-2023-36025", "field": "creation_timestamp", "uuid": "a985d80f-187f-498d-b590-602a35f8db65", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1atest repo for CVE-2023-36025\nURL\uff1ahttps://github.com/louiselalanne/CVE-2023-49314\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5981", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2023-11-14T08:00:00Z", "date_only": false, "value": "2023-11-14T08:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36025", "record": "MSRC_CVE-2023-36025", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}}}