ViperSoftX Updates Encryption, Steals Data
trendmicro.com · Undated · Licence: TRAM repository license; underlying reports not cleared for redistribution
CVEs this report names
1 CVE- CVE-2023-24055KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration…Public exploit1 report3.7%Top 10%61.8priority
Where it names them
CVE-2023-24055 Original (opens in a new tab) ↗
Noting the malware’s capability to scann KeePass, we looked into the possible abuse of the KeePass security gap CVE-2023-24055, which forces the application to dump stored passwords in plain text (a feature already disabled in recent patches and versions).
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.