UNC215: Spotlight on a Chinese Espionage Campaign in Israel

fireeye.com · Undated · Licence: TRAM repository license; underlying reports not cleared for redistribution

CVEs this report names

1 CVE

CVE-2019-0604Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft · SharePointKEVRansomwarePublic exploitCritical · 9.8T1608.001Upload Malware T1190Exploit Public-Facing Application+3 more · 4 reports
99.9%Top 0.03%
88.8priority

CVE-2019-0604 to install web shells and FOCUSFJORD payloads at targets

Microsoft SharePoint vulnerability CVE-2019-0604 was used to deliver

None

No passage in this report has been tied to an ATT&CK technique.