Patchfirst

Microsoft Word - JCSA-20241030-001

ic3.gov · Undated · Licence: not cleared; local research copy only

Read the original ↗

CVEs this report names

1 CVE
  1. CVE-2023-38831RARLAB WinRAR Code Execution Vulnerability
    RARLAB · WinRARKEVRansomwarePublic exploitHigh · 7.8T1204User ExecutionT1053Scheduled Task/Job+5 more · 1 report
    99.8%Top 0.04%
    82.3priority

Where it names them

CVE-2023-38831
providers such as Private Internet Access, Windscribe, Express VPN, NordVPN, and Urban VPN Acquire Infrastructure T1583 ASA has obtained operational servers from its cover-hosting resellers (server-speed[.]com and more recently vps-agent[.]net) Develop Capabilities T1587 Weaponization of CVE 2023-38831
Original (opens in a new tab) ↗

Techniques drawn from this report

1 link, in kill-chain order

Resource Development Develop Capabilities T1587 for CVE-2023-38831

ATT&CK ID cited in the report

providers such as Private Internet Access, Windscribe, Express VPN, NordVPN, and Urban VPN Acquire Infrastructure T1583 ASA has obtained operational servers from its cover-hosting resellers (server-speed[.]com and more recently vps-agent[.]net) Develop Capabilities T1587 Weaponization of CVE 2023-38831
Original (opens in a new tab) ↗
↑ ↓ chooseEnter openEsc close