{"vulnerability": "CVE-2018-8453", "sightings": [{"uuid": "138c5461-a8e8-4bf2-984b-e66364f4de8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "MISP/5bbe1197-99e0-4b4e-9758-35060a021402", "content": "", "creation_timestamp": "2018-10-10T14:53:44.000000Z"}, {"uuid": "f2544d9c-f8b0-4c01-ba0c-0220c7894e80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "MISP/5bbdd041-b484-449b-b9db-65b7ac100a5a", "content": "", "creation_timestamp": "2018-10-10T10:13:36.000000Z"}, {"uuid": "c40787ed-af89-499e-bcdf-52702c1d0b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "MISP/5bbdb2cd-0488-47d3-b2a1-186aac12042b", "content": "", "creation_timestamp": "2018-10-10T08:10:34.000000Z"}, {"uuid": "eb1e4dc7-4628-41e7-bf36-11c8b8ef559e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "MISP/5bbe07fe-9cac-49a1-9527-323a0a021402", "content": "", "creation_timestamp": "2018-10-10T14:13:18.000000Z"}, {"uuid": "b9f0e9fc-5ce2-4b5b-9176-9e87910b989e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "MISP/5d95af4c-cc50-4c1b-b4b2-17390a3b4631", "content": "", "creation_timestamp": "2019-10-03T08:24:04.000000Z"}, {"uuid": "b51a3745-30f7-4eb0-816b-d24bd12df74b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "MISP/fbff27c0-f30f-445c-92af-76781df1856d", "content": "", "creation_timestamp": "2020-10-09T13:20:00.000000Z"}, {"uuid": "7bdc3ae5-1cc3-416e-9b77-9594b796fa1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "MISP/daac605a-555d-4add-87e1-91b990db7dae", "content": "", "creation_timestamp": "2020-10-09T14:28:38.000000Z"}, {"uuid": "202fb1d7-51b7-440a-9310-8f8d83803e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "MISP/b62ed471-b3bb-49c1-acac-9ee81f46fd0a", "content": "", "creation_timestamp": "2020-10-09T16:05:35.000000Z"}, {"uuid": "bebeb7a3-075f-47c1-8ab5-5100203c108a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "681c0f35-e34c-4979-b063-dcae75592827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "exploited", "source": "https://www.exploit-db.com/exploits/47134", "content": "", "creation_timestamp": "2019-07-17T00:00:00.000000Z"}, {"uuid": "4522f4b9-60f8-43c5-88a4-65d844e030a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971225", "content": "", "creation_timestamp": "2024-12-24T20:26:08.756358Z"}, {"uuid": "ba524538-81a6-435a-8c1a-88ca3512525a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "c2e55671-69a8-411e-b586-644a9a0d7be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:09.000000Z"}, {"uuid": "09a4e5c7-837c-47c6-ae27-66f1263ce075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:21.000000Z"}, {"uuid": "b7d9919c-3674-4bc5-8ee0-5eb7f6c9da14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2018_8453_win32k_priv_esc.rb", "content": "", "creation_timestamp": "2019-07-15T16:40:43.000000Z"}, {"uuid": "d58fa9bc-8a8a-4f7b-8e80-b3f0cd752980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:00.000000Z"}, {"uuid": "e167256c-54cb-4e44-9184-e6b4bd8ea9ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=331", "content": "", "creation_timestamp": "2018-10-10T04:00:00.000000Z"}, {"uuid": "bea78b2c-5b6a-472c-9084-f53b1a71df4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2018-8453", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c99627d5-bdd1-41db-8354-0f20cdfb3e3a", "content": "", "creation_timestamp": "2026-02-02T12:28:26.781949Z"}, {"uuid": "1ebcef27-09ad-48d2-9815-1caa8be548b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "published-proof-of-concept", "source": "https://t.me/cRyPtHoN_INFOSEC_DE/32", "content": "APT Group verwendet Windows Zero-Day f\u00fcr Angriffe im Nahen Osten\n\nEine Zero-Day-Sicherheitsanf\u00e4lligkeit in Windows, die Microsoft diese Woche mit seinen Patch-Updates vom November 2018 ansprach, wurde von einer Gruppe fortschrittlicher persistenter Bedrohungen (APT) bei Angriffen gegen Entit\u00e4ten im Nahen Osten ausgenutzt.\n\nMicrosoft hat die Sicherheitsl\u00fccke am 17. Oktober von Kaspersky Labs erfahren. Die Sicherheitsfirma entdeckte den Fehler, nachdem eines ihrer Produkte einen Angriff auf ein Windows-System festgestellt hatte. Weitere Analysen ergaben, dass es sich um eine Zero-Day-Sicherheitsanf\u00e4lligkeit im Zusammenhang mit der Win32k-Komponente in Windows handelt.\n\nDie Sicherheitsl\u00fccke ( CVE-2018-8589 ) erm\u00f6glicht es einem Angreifer, Berechtigungen auf einem angegriffenen Windows 7- oder Windows Server 2008-System zu erh\u00f6hen. Bei den von Kaspersky beobachteten Angriffen hatten Bedrohungsakteure den Exploit w\u00e4hrend der ersten Stufe eines Malware-Installationsprogramms ausgef\u00fchrt, es ist jedoch nicht klar, wie die Malware bereitgestellt wurde.\n\nKaspersky zufolge wurde die Sicherheitsanf\u00e4lligkeit nur bei einer \u201esehr begrenzten Anzahl von Angriffen\u201c angewandt, bei denen sich alle Opfer in L\u00e4ndern des Nahen Ostens befanden.\n\nDas Unternehmen konnte nicht sagen, welche Bedrohungsgruppe hinter diesen Angriffen stecken k\u00f6nnte, stellte jedoch fest, dass der Exploit von \"mindestens einem APT-Akteur\" genutzt wird.\n\nKaspersky hat einen Blogeintrag ver\u00f6ffentlicht, der technische Details zu CVE-2018-8589 enth\u00e4lt , die als Rennbedingung beschrieben wurden.\n\nDies ist nicht der einzige Zero-Day, den Kaspersky in den letzten Wochen an Microsoft gemeldet hat. Den Forschern des Unternehmens wurde au\u00dferdem die Entdeckung des CVE-2018-8453 zugeschrieben, das Microsoft mit seinen Oktober-Updates gel\u00f6st hatte. Die Sicherheitsl\u00fccke wurde von der Bedrohungsgruppe FruityArmor in einer sehr zielgerichteten Kampagne ausgenutzt.\n\nBeide von Kaspersky erkannten Schwachstellen bezogen sich auf die Win32k-Komponente von Windows und wurden beide bei Angriffen gegen Benutzer im Nahen Osten eingesetzt. Es ist jedoch unklar, ob eine Verbindung zwischen den beiden besteht.\n\n\"Der Herbst 2018 war eine ziemlich hei\u00dfe Saison f\u00fcr Zero-Day-Schwachstellen\", sagte Anton Ivanov, Sicherheitsexperte des Kaspersky Lab. \u201eIn nur einem Monat haben wir zwei dieser Bedrohungen entdeckt und zwei Angriffsserien in einer Region entdeckt. Die Diskretheit der Aktivit\u00e4ten von Cyberthreat-Schauspielern erinnert uns daran, dass es f\u00fcr Unternehmen von entscheidender Bedeutung ist, alle notwendigen Werkzeuge und L\u00f6sungen zu besitzen, die intelligent genug sind, um sie vor solchen hochentwickelten Bedrohungen zu sch\u00fctzen. Andernfalls k\u00f6nnten sie komplexe gezielte Angriffe erleben, die scheinbar aus dem Nichts\n\nhttps://www.securityweek.com/apt-group-uses-windows-zero-day-middle-east-attacks", "creation_timestamp": "2018-11-14T12:59:31.000000Z"}, {"uuid": "aebd93fc-4709-499d-a127-e52b7de19358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "https://t.me/cyberbannews_ir/4014", "content": "\u200d \ud83d\uded1\u0646\u0641\u0648\u0630 \u0647\u06a9\u0631\u0647\u0627 \u0628\u0647 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0628\u0627 \u062d\u0645\u0644\u0627\u062a \u0628\u0631\u0648\u062a \u0641\u0648\u0631\u0633\n\n \u0645\u062d\u0642\u0642\u0627\u0646 \u06a9\u0633\u067e\u0631\u0633\u06a9\u06cc \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u06af\u0632\u0627\u0631\u0634\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0631\u062e\u062f\u0627\u062f\u0647\u0627\u06cc \u0631\u0627\u06cc\u0627\u0646\u0647\u200c\u0627\u06cc \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0646\u062f \u062f\u0631 \u0633\u0627\u0644 2020 \u0647\u06a9\u0631\u0647\u0627 \u0628\u0631\u0627\u06cc \u0646\u0641\u0648\u0630 \u0628\u0647 \u0634\u0628\u06a9\u0647 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u0627\u063a\u0644\u0628 \u062d\u0645\u0644\u0627\u062a \u0628\u0631\u0648\u062a \u0641\u0648\u0631\u0633 \u0627\u0646\u062c\u0627\u0645 \u062f\u0627\u062f\u0647\u200c\u0627\u0646\u062f. \n\n\u062f\u0631 \u0633\u0627\u0644 2020 \u0645\u06cc\u0632\u0627\u0646 \u062d\u0645\u0644\u0627\u062a \u0628\u0631\u0648\u062a \u0641\u0648\u0631\u0633 \u062f\u0631 \u0633\u0631\u0627\u0633\u0631 \u062c\u0647\u0627\u0646 \u0628\u0647 \u0639\u0644\u062a \u0627\u0646\u062a\u0642\u0627\u0644 \u06af\u0633\u062a\u0631\u062f\u0647 \u06a9\u0627\u0631\u06a9\u0646\u0627\u0646 \u0634\u0631\u06a9\u062a\u200c\u0647\u0627 \u0628\u0647 \u062f\u0648\u0631\u06a9\u0627\u0631\u06cc \u062f\u0631 \u0632\u0645\u0627\u0646 \u0647\u0645\u0647\u200c\u06af\u06cc\u0631\u06cc \u0648 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06a9\u0631\u0631 \u0627\u0632 \u067e\u0631\u0648\u062a\u06a9\u0644 \u0622\u0631\u062f\u06cc\u200c\u067e\u06cc (RDP) \u0627\u0632 13% \u0628\u0647 32 \u062f\u0631\u0635\u062f \u0627\u0641\u0632\u0627\u06cc\u0634\u200c\u06cc\u0627\u0641\u062a\u0647 \u0627\u0633\u062a. \n\n\u0628\u0647 \u06af\u0641\u062a\u0647 \u0645\u062d\u0642\u0642\u0627\u0646\u060c \u062d\u0645\u0644\u0627\u062a\u06cc \u06a9\u0647 \u0628\u0627 \u062d\u062f\u0633 \u067e\u0633\u0648\u0631\u062f \u0622\u063a\u0627\u0632 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f\u060c \u0628\u0647 \u0644\u062d\u0627\u0638 \u0646\u0638\u0631\u06cc \u0628\u0647\u200c\u0622\u0633\u0627\u0646\u06cc \u0642\u0627\u0628\u0644 \u062a\u0634\u062e\u06cc\u0635 \u0647\u0633\u062a\u0646\u062f\u060c \u0627\u0645\u0627 \u062f\u0631 \u0639\u0645\u0644\u060c \u062a\u0646\u0647\u0627 \u0628\u062e\u0634 \u06a9\u0648\u0686\u06a9\u06cc \u0627\u0632 \u0622\u0646\u200c\u0647\u0627 \u0631\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u067e\u06cc\u0634 \u0627\u0632 \u0648\u0627\u0631\u062f \u0622\u0645\u062f\u0646 \u062e\u0633\u0627\u0631\u062a \u0645\u062a\u0648\u0642\u0641 \u06a9\u0631\u062f. \n\n\u062f\u0648\u0645\u06cc\u0646 \u0631\u0648\u0634 \u0645\u062a\u062f\u0627\u0648\u0644 \u0647\u06a9\u0631\u0647\u0627 \u0628\u0631\u0627\u06cc \u0646\u0641\u0648\u0630 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u067e\u0633 \u0627\u0632 \u0628\u0631\u0648\u062a \u0641\u0648\u0631\u0633\u060c \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0648\u062f\u0647 \u0627\u0633\u062a. \u0645\u06cc\u0632\u0627\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 31.5 \u062f\u0631\u0635\u062f \u0628\u0648\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u0627\u06a9\u062b\u0631 \u0645\u0648\u0627\u0631\u062f\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0645\u0634\u0647\u0648\u0631 \u0648 \u0648\u0635\u0644\u0647 \u0646\u0634\u062f\u0647 \u062f\u0631 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0647\u0645\u0686\u0648\u0646 CVE-2019-11510 \u060cCVE-2018-8453 \u0648 CVE-2017-0144 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f. \n\n#\u06a9\u0633\u067e\u0631\u0633\u06a9\u06cc\n\n@cyberbannews_ir", "creation_timestamp": "2021-09-25T08:25:18.000000Z"}, {"uuid": "1b99abc3-58de-4d3b-a0da-467151bcc158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "exploited", "source": "https://t.me/cyberbannews_ir/1024", "content": "\u200d \ud83d\uded1\u062d\u0645\u0644\u0647 \u062e\u0627\u0646\u0648\u0627\u062f\u0647\u200c\u0627\u06cc \u0627\u0632 \u0628\u0627\u062c \u0627\u0641\u0632\u0627\u0631 Sodinokibi \u0628\u0647 \u0634\u0631\u06a9\u062a \u0628\u0631\u0642 \u0628\u0631\u0632\u06cc\u0644\n\n\u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0632 \u062d\u0645\u0644\u0647 \u062e\u0627\u0646\u0648\u0627\u062f\u0647\u200c\u0627\u06cc \u0627\u0632 \u0628\u0627\u062c \u0627\u0641\u0632\u0627\u0631 \u00abSodinokibi\u00bb \u0628\u0647 \u0634\u0631\u06a9\u062a \u062a\u0648\u0632\u06cc\u0639 \u0646\u06cc\u0631\u0648\u06cc \u0628\u0631\u0642 \u0628\u0631\u0632\u06cc\u0644 \u062e\u0628\u0631 \u062f\u0627\u062f\u0646\u062f.\n\n\u0628\u0647 \u06af\u0632\u0627\u0631\u0634 \u06a9\u0627\u0631\u06af\u0631\u0648\u0647 \u062d\u0645\u0644\u0627\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0633\u0627\u06cc\u0628\u0631\u0628\u0627\u0646\u061b \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0627\u067e\u200c\u06af\u0631\u06cc\u062a (AppGate) \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u06af\u0632\u0627\u0631\u0634\u06cc \u0627\u0632 \u062d\u0645\u0644\u0647 \u0633\u0627\u06cc\u0628\u0631\u06cc \u062e\u0627\u0646\u0648\u0627\u062f\u0647\u200c\u0627\u06cc \u0627\u0632 \u0628\u0627\u062c \u0627\u0641\u0632\u0627\u0631 \u0633\u0648\u062f\u06cc\u0646\u0648\u06a9\u06cc\u0628\u06cc (Sodinokibi) \u0628\u0647 \u0634\u0631\u06a9\u062a \u062a\u0648\u0632\u06cc\u0639 \u0646\u06cc\u0631\u0648\u06cc \u0628\u0631\u0642 \u0628\u0631\u0632\u06cc\u0644 \u0628\u0647 \u0646\u0627\u0645 \u00ab.Light S.A\u00bb \u062e\u0628\u0631 \u062f\u0627\u062f\u0646\u062f. \n\n\u062a\u062d\u0644\u06cc\u0644\u06af\u0631\u0627\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0627\u067e\u200c\u06af\u06cc\u062a\u060c 17 \u0698\u0648\u0626\u0646 2020 \u0628\u0647 \u0646\u0633\u062e\u0647\u200c\u0627\u06cc \u0627\u0632 \u06cc\u06a9 \u0628\u0627\u062c \u0627\u0641\u0632\u0627\u0631 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627\u06a9\u0631\u062f\u0647 \u0648 \u0628\u0627 \u062a\u062c\u0632\u06cc\u0647\u200c\u0648\u062a\u062d\u0644\u06cc\u0644 \u0622\u0646\u060c \u062f\u0631\u06cc\u0627\u0641\u062a\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u06cc\u06a9\u06cc \u0627\u0632 \u062e\u0627\u0646\u0648\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u0628\u0627\u062c \u0627\u0641\u0632\u0627\u0631 \u0633\u0648\u062f\u06cc\u0646\u0648\u06a9\u06cc\u0628\u06cc \u0627\u0633\u062a. \n\n\u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0631 \u06cc\u06a9\u06cc \u0627\u0632 \u0635\u0641\u062d\u0627\u062a \u062f\u06cc\u067e \u0648\u0628 \u0645\u0648\u0631\u062e\u0647 19 \u0698\u0648\u0626\u0646 2020 \u0645\u0628\u0644\u063a \u0628\u0627\u062c \u0631\u0627 106 870,19 \u0645\u0648\u0646\u0631\u0648 \u062a\u0639\u06cc\u06cc\u0646 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0628\u0631 \u0627\u0633\u0627\u0633 \u0646\u0631\u062e \u0622\u0646 \u0631\u0648\u0632 7 \u0645\u06cc\u0644\u06cc\u0648\u0646 \u062f\u0644\u0627\u0631 \u0648 \u0637\u0628\u0642 \u0646\u0631\u062e \u0641\u0639\u0644\u06cc 14 \u0645\u06cc\u0644\u06cc\u0648\u0646 \u062f\u0644\u0627\u0631 \u0628\u0631\u0622\u0648\u0631\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0622\u0646\u200c\u0647\u0627 \u062f\u0631 \u0627\u06cc\u0646 \u0635\u0641\u062d\u0647 \u0628\u062e\u0634\u06cc \u0646\u06cc\u0632 \u0628\u0631\u0627\u06cc \u0686\u062a \u0642\u0631\u0628\u0627\u0646\u06cc \u0628\u0627 \u062e\u0648\u062f \u0627\u06cc\u062c\u0627\u062f \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f. \n\n\u0637\u0628\u0642 \u06af\u0632\u0627\u0631\u0634 \u0627\u067e\u200c\u06af\u06cc\u062a\u060c \u0627\u06cc\u0646 \u0639\u0645\u0644\u06cc\u0627\u062a \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u06af\u0631\u0648\u0647 \u062c\u0631\u0627\u0626\u0645 \u0633\u0627\u06cc\u0628\u0631\u06cc \u0628\u0647 \u0646\u0627\u0645 \u00abPinchy Spider\u00bb \u0627\u0646\u062c\u0627\u0645\u200c\u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u06af\u0631\u0648\u0647 \u062a\u0627\u06a9\u0646\u0648\u0646 \u0628\u0627\u062c \u0627\u0641\u0632\u0627\u0631 \u00abGandCrab\u00bb \u0631\u0627 \u0646\u06cc\u0632 \u062a\u0648\u0633\u0639\u0647 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627 \u0628\u0647\u0631\u0647\u200c\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u00abCVE-2018-8453\u00bb \u0648\u06cc\u0646\u062f\u0648\u0632 \u0642\u0627\u0628\u0644\u06cc\u062a \u062a\u0631\u0641\u06cc\u0639 \u0627\u0645\u062a\u06cc\u0627\u0632 \u062f\u0627\u0631\u062f.\n\n\u0634\u0631\u06a9\u062a \u0628\u0631\u0642 \u06cc\u0627\u062f \u0634\u062f\u0647 \u062d\u0645\u0644\u0647 \u0628\u0627\u062c \u0627\u0641\u0632\u0627\u0631 \u0633\u0648\u062f\u06cc\u0646\u0648\u06a9\u06cc\u0628\u06cc \u0631\u0627 \u062a\u0623\u06cc\u06cc\u062f \u06a9\u0631\u062f\u0647\u060c \u0627\u0645\u0627 \u062c\u0632\u0626\u06cc\u0627\u062a\u06cc \u062f\u0631 \u0627\u06cc\u0646 \u062e\u0635\u0648\u0635 \u0627\u0631\u0627\u0626\u0647 \u0646\u062f\u0627\u062f\u0647 \u0627\u0633\u062a.\n\n\u0628\u0627\u062c \u0627\u0641\u0632\u0627\u0631 \u0633\u0648\u062f\u06cc\u0646\u0648\u06a9\u06cc\u0628\u06cc \u06a9\u0647 \u0628\u0647 \u00abREvil\u00bb \u0646\u06cc\u0632 \u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u06cc \u0634\u0648\u062f \u0628\u0647\u200c\u0639\u0646\u0648\u0627\u0646 \u0633\u0631\u0648\u06cc\u0633 (RaaS) \u0628\u0647 \u06af\u0631\u0648\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u06cc\u0628\u0631\u06cc \u0645\u062e\u062a\u0644\u0641\u06cc \u0627\u062c\u0627\u0631\u0647 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0628\u0633\u06cc\u0627\u0631\u06cc \u062f\u0627\u0634\u062a\u0647 \u0648 \u0631\u062f\u06cc\u0627\u0628\u06cc \u0639\u0645\u0644\u06cc\u0627\u062a \u0622\u0646 \u0628\u0633\u06cc\u0627\u0631 \u062f\u0634\u0648\u0627\u0631 \u0627\u0633\u062a.\n\n#\u062d\u0645\u0644\u0647_\u0633\u0627\u06cc\u0628\u0631\u06cc \n#\u0628\u0627\u062c_\u0627\u0641\u0632\u0627\u0631 \n\n@cyberbannews_ir", "creation_timestamp": "2020-07-06T13:17:10.000000Z"}, {"uuid": "b5d3f130-b5fc-4cff-a037-d2512a1d97f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "exploited", "source": "https://t.me/ctinow/3477", "content": "Zero-day exploit (CVE-2018-8453) used in targeted attacks\n\nhttps://ift.tt/2QDiuoE", "creation_timestamp": "2018-10-10T09:15:53.000000Z"}, {"uuid": "9d31f36b-3dc3-4d24-90eb-c521d6658153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "exploited", "source": "https://t.me/ctinow/13276", "content": "Sodin Ransomware Exploits Windows Privilege Escalation Bug Exploitation of CVE-2018-8453 grants attackers the highest level of privileges on a target system. https://www.darkreading.com/perimeter/sodin-ransomware-exploits-windows-privilege-escalation-bug/d/d-id/1335145?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple", "creation_timestamp": "2019-07-03T20:02:43.000000Z"}, {"uuid": "197e2027-93c3-42c7-a9b8-0a72d3ba5470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "https://t.me/arpsyndicate/1185", "content": "#ExploitObserverAlert\n\nCVE-2018-8453\n\nDESCRIPTION: Exploit Observer has 55 entries related to CVE-2018-8453. An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka \"Win32k Elevation of Privilege Vulnerability.\" This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.\n\nFIRST-EPSS: 0.946940000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2023-12-04T10:54:21.000000Z"}, {"uuid": "5d37d8c2-c49f-46f5-8b02-ea270506a853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "https://t.me/true_secator/1084", "content": "Check Point \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0439 \u043d\u043e\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u043f\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e \u0430\u0432\u0442\u043e\u0440\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u0445 fingerprints.\n\n\u041c\u044b \u0443\u0436\u0435 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438 \u043f\u0440\u043e \u044d\u0442\u0443 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 - \u043f\u0435\u0440\u0432\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0437\u0434\u0435\u0441\u044c. \n\n\u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0442\u044f\u043d\u0435 \u0440\u0435\u0448\u0438\u043b\u0438 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c 1-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 CVE-2018-8453, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 (LPE) \u0432 Windows \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 ransomware Sodinokibi, Maze \u0438 \u0434\u0440.\n\n\u0418\u0437\u0443\u0447\u0438\u0432 fingerprint \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438 \u0441\u0440\u0430\u0432\u043d\u0438\u0432 \u0435\u0433\u043e \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 5 \u043e\u0434\u043d\u043e\u0434\u043d\u0435\u0432\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 (CVE-2013-3660, CVE-2015-0057, CVE-2015-1701, CVE-2016-7255 \u0438, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e, CVE-2018-8453), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043e\u0434\u043d\u0438\u043c \u0438 \u0442\u0435\u043c \u0436\u0435 \u0430\u0432\u0442\u043e\u0440\u043e\u043c (\u0433\u0440\u0443\u043f\u043f\u043e\u0439) \u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 LPE.\n\n\u041a\u0430\u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 Check Point, \u0437\u0430 \u0432\u0441\u0435\u043c\u0438 \u044d\u0442\u0438\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438 \u0441\u0442\u043e\u0438\u0442 \u0430\u043a\u0442\u043e\u0440 PlayBit aka luxor2008. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0440\u044f\u0434 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u0432 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0438\u0445 \u0430\u0432\u0442\u043e\u0440\u0430. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 \u043a\u0430\u0436\u0434\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u043c\u0430\u043b\u0435\u043d\u044c\u043a\u0430\u044f \u043e\u0431\u0435\u0440\u0442\u043a\u0430 \u0432\u043e\u043a\u0440\u0443\u0433 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043b\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0445\u043e\u0441\u0442  \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0427\u0442\u043e \u0436\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0443\u0437\u043d\u0430\u0442\u044c \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0442\u044f\u043d\u0430\u043c \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 PlayBit. \u041d\u0443, \u0432\u043e-\u043f\u0435\u0440\u0432\u044b\u0445, \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0430\u043a\u0442\u043e\u0440 - \u0440\u0443\u0441\u0441\u043a\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0439 (\u043d\u0435 \u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e) \u0438 \u0440\u0435\u043a\u043b\u0430\u043c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u0440\u0443\u0441\u0441\u043a\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0445 \u0436\u0435 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0444\u043e\u0440\u0443\u043c\u0430\u0445. \u0412\u043e-\u0432\u0442\u043e\u0440\u044b\u0445, \u0443 PlayBit \u0435\u0441\u0442\u044c \u0441\u0432\u043e\u0439 \u043e\u0434\u043d\u043e\u0438\u043c\u0435\u043d\u043d\u044b\u0439 YouTube-\u043a\u0430\u043d\u0430\u043b \u0441 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044f\u043c\u0438 \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438 \u043e\u043d \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d (!).\n\nPlayBit \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 2012 \u0433\u043e\u0434\u0430 \u0438 \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0438\u0437\u0433\u043e\u0442\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043d\u0430 \u043f\u0440\u043e\u0434\u0430\u0436\u0443 \u043f\u043e \u043e\u0434\u043d\u043e\u043c\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0443 \u0432 \u0433\u043e\u0434. \u0422\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438\u0441\u044c \u0441\u043e\u0432\u0441\u0435\u043c \u0441\u0432\u0435\u0436\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043e\u0442 \u044d\u0442\u043e\u0433\u043e \u0430\u0432\u0442\u043e\u0440\u0430 - CVE-2019-1069 \u0438 CVE-2020-0787.\n\n\u0426\u0435\u043d\u044b \u043d\u0430 \u043e\u0434\u043d\u043e\u0434\u043d\u0435\u0432\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u0441\u0430\u043c\u043e \u0441\u043e\u0431\u043e\u0439, \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u043d\u0438\u0436\u0435 0-day \u0438 \u0443 PlayBit \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043e\u0442 5 \u0434\u043e 10 \u0442\u044b\u0441. \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432, \u043f\u0440\u0438\u0447\u0435\u043c \u0446\u0435\u043d\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0434\u043d\u0430 \u0438 \u0442\u0430 \u0436\u0435 \u0438\u0437 \u0433\u043e\u0434\u0430 \u0432 \u0433\u043e\u0434.\n\n\u0412 \u043e\u0431\u0449\u0435\u043c, \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 fingerprint's \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0432\u043f\u043e\u043b\u043d\u0435 \u0440\u0430\u0431\u043e\u0447\u0430\u044f \u0438 \u0434\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b. \u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043d\u0435\u0435 Check Point \u0432\u043f\u043e\u043b\u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u0447\u0442\u043e, \u0431\u0435\u0437 \u0441\u043e\u043c\u043d\u0435\u043d\u0438\u044f, \u0441\u0434\u0435\u043b\u0430\u0435\u0442 \u043a\u0430\u0440\u0442\u0438\u043d\u0443 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u043c\u0438\u0440\u0430 \u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u043e\u0439 \u0438 \u043f\u043e\u043d\u044f\u0442\u043d\u043e\u0439.", "creation_timestamp": "2020-10-26T14:14:23.000000Z"}, {"uuid": "c1c1fa24-9ef5-460b-9842-56620add1f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "exploited", "source": "https://t.me/true_secator/725", "content": "\u200b\u200b\u0421\u0440\u0430\u0437\u0443 \u0434\u0432\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u043f\u0440\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 ransomware \u043e\u0442 Security Affairs.\n\n\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f Maze, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0442\u0435\u043f\u0435\u0440\u044c Cartel, \u0432 \u0432\u043e\u0441\u043a\u0440\u0435\u0441\u0435\u043d\u044c\u0435 \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u043b \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u0434\u043e\u0440\u043e\u0433 \u0418\u043d\u0434\u0438\u0438 (NHAI), \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0441\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u044e\u044e \u0441\u0435\u0442\u044c. \n\n\u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043d\u0434\u0438\u0439\u0441\u043a\u0438\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0437\u0430\u044f\u0432\u0438\u043b\u0438 \u0432 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a, \u0447\u0442\u043e \u0445\u043e\u0442\u044f \u0432\u0437\u043b\u043e\u043c \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 NHAI \u0438 \u0438\u043c\u0435\u043b \u043c\u0435\u0441\u0442\u043e, \u043d\u043e \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u0431\u044b\u043b\u0430 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0430 \u043f\u0443\u0442\u0435\u043c \u0435\u0433\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f. \u0421\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0435 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430.\n\n\u041f\u0440\u0430\u0432\u0434\u0430 Maze Cartel \u0441 \u044d\u0442\u0438\u043c \u043d\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u044b \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 \u0441\u0432\u043e\u0435\u043c \u0441\u0430\u0439\u0442\u0435 \u0447\u0430\u0441\u0442\u044c \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u043e\u0439 \u0443 NHAI \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u0415\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Cyble, \u043a\u0430\u043a \u0440\u0430\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0438\u0435\u0441\u044f \u043d\u0430 \u0443\u0442\u0435\u0447\u043a\u0430\u0445 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a ransomware, \u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0432 \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0412\u0442\u043e\u0440\u043e\u0439 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b - \u043f\u0440\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f Sodinokibi (\u043e\u043d \u0436\u0435 REvil). \n\n\u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Sodinokibi \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u043e \u0441\u0445\u0435\u043c\u0435 Ransomware-as-a-Service (RaaS), \u0441\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u044c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0443\u0441\u0441\u043a\u043e\u044f\u0437\u044b\u0447\u043d\u043e\u0439 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439. \n\n\u041a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u044f\u0435\u0442\u0441\u044f, \u0432 \u0438\u044e\u043d\u0435 Sodinokibi \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0431\u0440\u0430\u0437\u0438\u043b\u044c\u0441\u043a\u0443\u044e \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e Light SA, \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0438 \u0432\u044b\u043f\u043b\u0430\u0442\u0443 \u043a 19 \u0438\u044e\u043d\u044f 7 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0432 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u0435 Monero (\u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0437\u0430\u044f\u0432\u0438\u043b \u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043d\u0430 \u044d\u0442\u043e\u0442 \u0432\u0438\u0434 \u043a\u0440\u0438\u0442\u043f\u044b \u043a\u0430\u043a \u0441\u0430\u043c\u044b\u0439 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0439 \u043e\u0442 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u043e\u0432). \u041d\u043e \u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u043c\u0443 \u0441\u0440\u043e\u043a\u0443 \u0432\u044b\u043f\u043b\u0430\u0442\u0430 \u043d\u0435 \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0441\u0443\u043c\u043c\u0430 \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0430 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c ransomware \u0434\u043e 14 \u043c\u043b\u043d. \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n\n\u041d\u043e \u0432 \u044d\u0442\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043d\u0435 \u0441\u0443\u043c\u043c\u0430 \u0432\u044b\u043a\u0443\u043f\u0430, \u0430 \u0442\u043e\u0442 \u0444\u0430\u043a\u0442, \u0447\u0442\u043e, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043d\u0444\u043e\u0441\u0435\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 AppGate, \u043f\u0440\u0438 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0440\u0435\u0441\u0443\u0440\u0441\u044b Light SA \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0442\u0430\u0440\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2018-8453 - \u0434\u044b\u0440\u043a\u0443 \u0432 Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0435\u0449\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2018 \u0433\u043e\u0434\u0430.\n\n\u0422\u043e \u0435\u0441\u0442\u044c \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043d\u043e\u0433\u043e \u0430\u043f\u0434\u0435\u0439\u0442\u0430 \u0442\u043e\u0440\u0447\u0430\u0449\u0435\u0439 \u0432 \u0441\u0435\u0442\u044c \u043c\u0430\u0448\u0438\u043d\u044b \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c 14 \u043c\u043b\u043d. \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432. \u0425\u043e\u0440\u043e\u0448\u0438\u0439 \u0441\u0442\u0438\u043c\u0443\u043b \u0434\u043b\u044f \u0440\u0438\u0441\u043a-\u043c\u0435\u043d\u0435\u0434\u0436\u043c\u0435\u043d\u0442\u0430 \u0432 \u0447\u0430\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u043d\u0435\u0443\u043a\u043e\u0441\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u043e\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f \u0441\u0442\u0440\u043e\u0433\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440 \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e\u0441\u044f \u041f\u041e.", "creation_timestamp": "2020-07-03T10:50:13.000000Z"}, {"uuid": "2fc5cd29-73fa-4f58-a874-4893ff86475f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "exploited", "source": "https://t.me/information_security_channel/29049", "content": "Sodin Ransomware Exploits Windows Privilege Escalation Bug\nhttps://www.darkreading.com/perimeter/sodin-ransomware-exploits-windows-privilege-escalation-bug/d/d-id/1335145?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple\n\nExploitation of CVE-2018-8453 grants attackers the highest level of privileges on a target system.", "creation_timestamp": "2019-07-03T20:26:26.000000Z"}, {"uuid": "a1a7ff91-68db-41cc-89cc-8aa8b5386943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "exploited", "source": "https://t.me/xakep_ru/4873", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Windows \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0411\u043b\u0438\u0436\u043d\u0435\u0433\u043e \u0412\u043e\u0441\u0442\u043e\u043a\u0430\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0441\u0435\u0440\u0438\u044f \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Microsoft Windows. \n\nhttps://xakep.ru/2018/10/16/cve-2018-8453-under-attack/", "creation_timestamp": "2018-10-16T10:35:16.000000Z"}, {"uuid": "e8a7812f-5afc-4225-8ad1-f14430e5a2a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "exploited", "source": "https://t.me/canyoupwnme/4555", "content": "Zero-day exploit (CVE-2018-8453) used in targeted attacks\nhttps://securelist.com/cve-2018-8453-used-in-targeted-attacks/88151/", "creation_timestamp": "2018-10-11T19:43:02.000000Z"}, {"uuid": "f990d1bb-2da1-474c-a5c9-60b9f3ec297a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "https://t.me/cibsecurity/5339", "content": "\ud83d\udd74 Sodin Ransomware Exploits Windows Privilege Escalation Bug \ud83d\udd74\n\nExploitation of CVE-2018-8453 grants attackers the highest level of privileges on a target system.\n\n\ud83d\udcd6 Read\n\nvia \"Dark Reading: \".", "creation_timestamp": "2019-07-03T20:07:05.000000Z"}, {"uuid": "178a6906-3326-4ebc-ab65-50777cacee14", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fecd09d4-2fc8-4a03-ab0b-19030b864d3b", "content": "", "creation_timestamp": "2026-06-19T12:47:40.699149Z"}, {"uuid": "a11ab4cd-1629-4a35-89ae-ee89908d5075", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5ddfea0c-0b28-464d-9bdb-2e5471eccd91", "content": "", "creation_timestamp": "2026-06-23T14:04:54.492350Z"}, {"uuid": "92c2abe4-46e0-49df-a945-9f634faf8fa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msx3lvwvox2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2018-8453: An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle object\u2026\nCVSS 7.8 \u00b7 EPSS 70.0% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2018-8453\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-13T07:09:49.938768Z"}, {"uuid": "8bd4f250-9add-4dab-be12-65789d8335fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "published-proof-of-concept", "source": "Telegram/wJuKGXxFdVqbqF9GGbF7OAkx6Co4a3Cn0KIj71FCqKpX4w", "content": "", "creation_timestamp": "2026-08-19T01:00:04.187232Z"}, {"uuid": "092c436e-c2c7-4a2c-b76f-1983fd531f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "published-proof-of-concept", "source": "Telegram/wJuKGXxFdVqbqF9GGbF7OAkx6Co4a3Cn0KIj71FCqKpX4w", "content": "", "creation_timestamp": "2026-08-20T00:00:29.839402Z"}, {"uuid": "f059bb3d-1b23-4fc3-957a-2ea73711c645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "https://t.me/cissp/1586", "content": "\u201c10 Ransomware Attacks You Should Know About in 2019\u201d April 28, 2019. Allot. https://www.allot.com/blog/10-ransomware-attacks-2019/\n46. Ransomware Decryptor Tools. Avast. https://www.avast.com/ransomware-decryption-tools\n47. PewCrypt Ransomware Source. GitHub. https://github.com/000JustMe/PewCrypt\n48. \u201cAre the REvil, GranCrab Ransomware Families Related?\u201d September 25, 2019. MSSP Alert. https://www.msspalert.com/cybersecurity-breaches-and-attacks/ransomware/revil-gandcrab- related/\n49. \u201cThreat Landscape Report\u201d, Fortinet. https://www.fortinet.com/content/dam/fortinet/assets/threat-reports/threat-report-q3-2019.pdf\n50. \u201cSodin Ransomware includes exploit for Windows CVE-2018-8453 bug\u201c. July 4, 2019. Security Affairs. https://securityaffairs.co/wordpress/87944/malware/sodin-ransomware-cve-2018- 8453.html\n51. \u201cThreat Landscape Report\u201d 2019. Fortinet. https://www.fortinet.com/content/dam/fortinet/assets/threat-reports/threat-report-q2-2019.pdf\n52. \u201cEmsisoft Decryptor for Aurora\u201d 2019. Emsisoft. https://www.emsisoft.com/ransomware- decryption-tools/aurora\n53. \u201cEmsisoft Decryptor for Muhstik\u201d 2019. Emsisoft. https://www.emsisoft.com/ransomware- decryption-tools/muhstik\n54. \u201cCaution! Ryuk Ransomware decryptor damages larger files, even if you pay\u201d. December 9, 2019. Emsisoft. https://blog.emsisoft.com/en/35023/bug-in-latest-ryuk-decryptor-may-cause- data-loss/\n55. \u201cRakhniDecryptor tool for defending against Trojan-Ransom.Win32.Rakhni ransomware\u201d. Kaspersky. https://support.kaspersky.com/10556\n56. \u201cAnother two bite the dust: Kaspersky updates decryption tool to fight ransomware pair\u201d. September 27, 2019. The Online Citizen. https://www.theonlinecitizen.com/2019/09/27/another- two-bite-the-dust-kaspersky-updates-decryption-tool-to-fight-ransomware-pair/\n57. \u201cMira Ransomware Decryptor\u201d April 1, 2019. F-Secure. https://blog.f-secure.com/mira- ransomware-decryptor/\n58. \u201cNemty update: decryptors for Nemty 1.5 and 1.6\u201d Tesorion. https://www.tesorion.nl/nemty- update-decryptors-for-nemty-1-5-and-1-6/\n59. \u201cMcAfee Labs Threats Report\u201d, August, 2019. McAfee, https://www.mcafee.com/enterprise/en-us/assets/reports/rp-quarterly-threats-aug-2019.pdf\n60. \u201cThe 10 biggest ransomware attacks of 2019\u201d CRN. https://www.crn.com/slide- shows/security/the-10-biggest-ransomware-attacks-of-2019/2\n61. \u201cThe 10 biggest ransomware attacks of 2019\u201d CRN. https://www.crn.com/slide- shows/security/the-10-biggest-ransomware-attacks-of-2019/3\n62. \u201cThe 10 biggest ransomware attacks of 2019\u201d CRN. https://www.crn.com/slide- shows/security/the-10-biggest-ransomware-attacks-of-2019/6\n63. \u201cThe 10 biggest ransomware attacks of 2019\u201d CRN. https://www.crn.com/slide- shows/security/the-10-biggest-ransomware-attacks-of-2019/7\n64. \u201cThe 10 biggest ransomware attacks of 2019\u201d CRN. https://www.crn.com/slide- shows/security/the-10-biggest-ransomware-attacks-of-2019/11\n65. https://www.nomoreransom.org/\n\nbe up 2 date 4 Defence Today,\nSecure Tomorrow\n@cisoasaservice", "creation_timestamp": "2026-09-01T17:01:11.350672Z"}, {"uuid": "bc829d3f-1931-47d3-8f9b-2273df761da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "https://t.me/cissp/1586", "content": "\u201c10 Ransomware Attacks You Should Know About in 2019\u201d April 28, 2019. Allot. https://www.allot.com/blog/10-ransomware-attacks-2019/\n46. Ransomware Decryptor Tools. Avast. https://www.avast.com/ransomware-decryption-tools\n47. PewCrypt Ransomware Source. GitHub. https://github.com/000JustMe/PewCrypt\n48. \u201cAre the REvil, GranCrab Ransomware Families Related?\u201d September 25, 2019. MSSP Alert. https://www.msspalert.com/cybersecurity-breaches-and-attacks/ransomware/revil-gandcrab- related/\n49. \u201cThreat Landscape Report\u201d, Fortinet. https://www.fortinet.com/content/dam/fortinet/assets/threat-reports/threat-report-q3-2019.pdf\n50. \u201cSodin Ransomware includes exploit for Windows CVE-2018-8453 bug\u201c. July 4, 2019. Security Affairs. https://securityaffairs.co/wordpress/87944/malware/sodin-ransomware-cve-2018- 8453.html\n51. \u201cThreat Landscape Report\u201d 2019. Fortinet. https://www.fortinet.com/content/dam/fortinet/assets/threat-reports/threat-report-q2-2019.pdf\n52. \u201cEmsisoft Decryptor for Aurora\u201d 2019. Emsisoft. https://www.emsisoft.com/ransomware- decryption-tools/aurora\n53. \u201cEmsisoft Decryptor for Muhstik\u201d 2019. Emsisoft. https://www.emsisoft.com/ransomware- decryption-tools/muhstik\n54. \u201cCaution! Ryuk Ransomware decryptor damages larger files, even if you pay\u201d. December 9, 2019. Emsisoft. https://blog.emsisoft.com/en/35023/bug-in-latest-ryuk-decryptor-may-cause- data-loss/\n55. \u201cRakhniDecryptor tool for defending against Trojan-Ransom.Win32.Rakhni ransomware\u201d. Kaspersky. https://support.kaspersky.com/10556\n56. \u201cAnother two bite the dust: Kaspersky updates decryption tool to fight ransomware pair\u201d. September 27, 2019. The Online Citizen. https://www.theonlinecitizen.com/2019/09/27/another- two-bite-the-dust-kaspersky-updates-decryption-tool-to-fight-ransomware-pair/\n57. \u201cMira Ransomware Decryptor\u201d April 1, 2019. F-Secure. https://blog.f-secure.com/mira- ransomware-decryptor/\n58. \u201cNemty update: decryptors for Nemty 1.5 and 1.6\u201d Tesorion. https://www.tesorion.nl/nemty- update-decryptors-for-nemty-1-5-and-1-6/\n59. \u201cMcAfee Labs Threats Report\u201d, August, 2019. McAfee, https://www.mcafee.com/enterprise/en-us/assets/reports/rp-quarterly-threats-aug-2019.pdf\n60. \u201cThe 10 biggest ransomware attacks of 2019\u201d CRN. https://www.crn.com/slide- shows/security/the-10-biggest-ransomware-attacks-of-2019/2\n61. \u201cThe 10 biggest ransomware attacks of 2019\u201d CRN. https://www.crn.com/slide- shows/security/the-10-biggest-ransomware-attacks-of-2019/3\n62. \u201cThe 10 biggest ransomware attacks of 2019\u201d CRN. https://www.crn.com/slide- shows/security/the-10-biggest-ransomware-attacks-of-2019/6\n63. \u201cThe 10 biggest ransomware attacks of 2019\u201d CRN. https://www.crn.com/slide- shows/security/the-10-biggest-ransomware-attacks-of-2019/7\n64. \u201cThe 10 biggest ransomware attacks of 2019\u201d CRN. https://www.crn.com/slide- shows/security/the-10-biggest-ransomware-attacks-of-2019/11\n65. https://www.nomoreransom.org/\n\nbe up 2 date 4 Defence Today,\nSecure Tomorrow\n@cisoasaservice", "creation_timestamp": "2026-09-02T01:05:01.374349Z"}, {"uuid": "f6df50ec-a634-41f7-8e2f-a26bf5ae2cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-8453", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2018_8453_win32k_priv_esc.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86\", \"author\": [\"ze0r\", \"Kaspersky Lab\", \"Jacob Robles\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"An elevation of privilege vulnerability exists in Windows when the Win32k component\\n          fails to properly handle objects in memory, aka \\\"Win32k Elevation of Privilege Vulnerability.\\\"\\n          This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows\\n          Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2,\\n          Windows 10, Windows 10 Servers.\\n          This module is tested against Windows 10 v1703 x86.\", \"disclosure_date\": \"2018-10-09\", \"fullname\": \"exploit/windows/local/cve_2018_8453_win32k_priv_esc\", \"is_install_path\": true, \"mod_time\": \"2025-06-25 09:25:53 +0000\", \"name\": \"Windows NtUserSetWindowFNID Win32k User Callback\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"artifacts-on-disk\", \"screen-effects\"], \"Stability\": [\"crash-os-restarts\"]}, \"path\": \"/modules/exploits/windows/local/cve_2018_8453_win32k_priv_esc.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"windows/local/cve_2018_8453_win32k_priv_esc\", \"references\": [\"CVE-2018-8453\", \"URL-https://github.com/ze0r/cve-2018-8453-exp\", \"URL-https://mp.weixin.qq.com/s/ogKCo-Jp8vc7otXyu6fTig\", \"URL-https://mp.weixin.qq.com/s/dcbUeegM0BqErtDufOXfoQ\", \"URL-https://securelist.com/cve-2018-8453-used-in-targeted-attacks/88151/\", \"URL-https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8453\"], \"rport\": null, \"session_types\": [\"meterpreter\"], \"targets\": [\"Windows 10 v1703 (Build 15063) x86\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:07.576006Z"}]}