Revealing Emperor Dragonfly: Night Sky and Cheerscrypt - A Single Ransomware Group
sygnia.co · 3 Oct 2022 · Licence: not cleared; local research copy only
CVEs this report names
2 CVEs- CVE-2024-20399Cisco NX-OS Command Injection VulnerabilityCisco · NX-OSKEVPublic exploitMedium · 6.7T1078Valid AccountsT1059Command and Scripting Interpreter3 reports4.3%Top 8.9%73.7priority
- CVE-2021-4428what3words Autosuggest Plugin Setting class-w3w-autosuggest-public.php enqueue_scripts information disclosurewhat3words · Autosuggest PluginPublic exploitLow · 2.71 report15.8%Top 3.1%32.3priority
Where it names them
CVE-2024-20399 Original (opens in a new tab) ↗
China-Nexus Threat Group ‘Velvet Ant’ Exploits Cisco Zero-Day (CVE-2024-20399) to Compromise Nexus Switch Devices – Advisory for Mitigation and Response
CVE-2021-4428 Original (opens in a new tab) ↗
In January 2022, a VMware Horizon server was compromised by threat actors leveraging the Log4Shell vulnerability (CVE-2021-4428).
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.