Higaisa or Winnti? APT41 backdoors, old and new
ptsecurity.com · Undated · Licence: TRAM repository license; underlying reports not cleared for redistribution
CVEs this report names
1 CVE- CVE-2020-0796Microsoft SMBv3 Remote Code Execution VulnerabilityMicrosoft · SMBv3KEVRansomwarePublic exploitCritical · 10.0T1190Exploit Public-Facing Application3 reports99.8%Top 0.04%87.7priority
Where it names them
CVE-2020-0796 Original (opens in a new tab) ↗
Four images were there for all to see: an email icon, screenshot from a game with Russian text, screenshot of the site of a game development company, and a screenshot of information about vulnerability CVE-2020-0796 from the Microsoft website.
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.