RYUK RANSOMWARE
cert.ssi.gouv.fr · Undated · Licence: not cleared; local research copy only
CVEs this report names
1 CVE- CVE-2020-1472Microsoft Netlogon Privilege Escalation VulnerabilityMicrosoft · NetlogonKEVRansomwarePublic exploitMedium · 5.5T1133External Remote ServicesT1068Exploitation for Privilege Escalation+4 more · 8 reports99.4%Top 0.06%86.8priority
Where it names them
CVE-2020-1472 Original (opens in a new tab) ↗
Privileges have been escalated using Mimikatz, Rubeus 4, or by exploiting a Zerologon vulnerability (CVE-2020- 1472).
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.