Operation Tropic Trooper: Relying on Tried-and-Tested Flaws to Infiltrate Secret Keepers
documents.trendmicro.com · Undated · Licence: not cleared; local research copy only
CVEs this report names
2 CVEs- CVE-2012-0158Microsoft MSCOMCTL.OCX Remote Code Execution VulnerabilityMicrosoft · MSCOMCTL.OCXKEVRansomwarePublic exploitHigh · 8.8T1189Drive-by CompromiseT1203Exploitation for Client Execution15 reports>99.9%Top 0.02%89.2priority
- CVE-2010-3333Microsoft Office Stack-based Buffer Overflow VulnerabilityMicrosoft · OfficeKEVPublic exploitHigh · 7.8T1203Exploitation for Client ExecutionT1204.002Malicious File5 reports89.4%Top 0.22%78.4priority
Where it names them
CVE-2012-0158 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
CVE-2010-3333 and CVE-2012-0158—to infiltrate
2010-3333 and CVE-2012- 0158.
CVE-2010-3333 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
CVE-2010-3333 and CVE-2012-0158—to infiltrate
vulnerabilities, particularly CVE- 2010-3333 and CVE-2012-
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.