The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Access
volexity.com · 22 Nov 2024 · Licence: not cleared; local research copy only
CVEs this report names
1 CVE- CVE-2022-38028Microsoft Windows Print Spooler Privilege Escalation Vulnerability14.9%Top 3.3%68.9priority
Where it names them
CVE-2022-38028 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
This tool was leveraged in the zero-day exploitation of CVE-2022-38028, a privilege escalation vulnerability in the Microsoft Windows Print Spooler service.
Exploitation of CVE-2022-38028 also provides an explanation as to how the initial victim system was likely compromised.
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.