Japan-Linked Organizations Targeted in Long-Running and Sophisticated Attack Campaign
security.com · Undated · Licence: not cleared; local research copy only
CVEs this report names
1 CVE- CVE-2020-1472Microsoft Netlogon Privilege Escalation VulnerabilityMicrosoft · NetlogonKEVRansomwarePublic exploitMedium · 5.5T1133External Remote ServicesT1068Exploitation for Privilege Escalation+4 more · 8 reports99.4%Top 0.06%86.8priority
Where it names them
CVE-2020-1472 Original (opens in a new tab) ↗
The attackers were also seen deploying a tool capable of exploiting the ZeroLogon vulnerability (CVE-2020-1472).
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.