Record · corpus.blog/posts/01a0ca8d-6299-7280-8ee9-8ce67d1c8fb0

Windows CLFS and five exploits used by ransomware operators

Kaspersky Securelist · published 21 December 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securelist.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 29
Words captured: 2,338

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Nokoyawa ransomware attacks with Windows zero-day Read at the source ↗

securelist.com

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28252

msrc.microsoft.com

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24521

msrc.microsoft.com

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37969

msrc.microsoft.com

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23376

msrc.microsoft.com

MysterySnail attacks with Windows zero-day Read at the source ↗

securelist.com

A new exploit for zero-day vulnerability CVE-2018-8589 Read at the source ↗

securelist.com

Windows CLFS and five exploits used by ransomware operators (Exploit #1 – CVE-2022-24521) Read at the source ↗

securelist.com

Windows CLFS and five exploits used by ransomware operators (Exploit #2 – September 2022) Read at the source ↗

securelist.com

Windows CLFS and five exploits used by ransomware operators (Exploit #3 – October 2022) Read at the source ↗

securelist.com

Windows CLFS and five exploits used by ransomware operators (Exploit #4 – CVE-2023-23376) Read at the source ↗

securelist.com

Windows CLFS and five exploits used by ransomware operators (Exploit #5 – CVE-2023-28252) Read at the source ↗

securelist.com

https://learn.microsoft.com/en-us/windows-hardware/drivers/kernel/introduction-to-the-common-log-file-system

learn.microsoft.com

https://learn.microsoft.com/en-us/previous-versions/windows/desktop/clfs/common-log-file-system-portal

learn.microsoft.com

https://learn.microsoft.com/en-us/windows/win32/api/clfsw32/nf-clfsw32-createlogfile

learn.microsoft.com

https://learn.microsoft.com/en-us/windows/win32/api/clfsw32/nf-clfsw32-addlogcontainer

learn.microsoft.com

https://learn.microsoft.com/en-us/windows/win32/api/clfsw32/nf-clfsw32-addlogcontainerset

learn.microsoft.com

https://github.com/ionescu007/clfs-docs/blob/main/README.md

github.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2023/12/20151603/Windows-CLFS-five-exploits-ransomware_part1_en_01.png

media.kasperskycontenthub.com

https://msrc.microsoft.com/update-guide/

msrc.microsoft.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2023/12/20151613/Windows-CLFS-five-exploits-ransomware_part1_en_02.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2023/12/20151624/Windows-CLFS-five-exploits-ransomware_part1_en_03.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2023/12/20151632/Windows-CLFS-five-exploits-ransomware_part1_en_04.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2023/12/20151642/Windows-CLFS-five-exploits-ransomware_part1_en_05.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2023/12/20151652/Windows-CLFS-five-exploits-ransomware_part1_en_06.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2023/12/20151703/Windows-CLFS-five-exploits-ransomware_part1_en_07.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2023/12/20151713/Windows-CLFS-five-exploits-ransomware_part1_en_08.png

media.kasperskycontenthub.com

https://learn.microsoft.com/en-us/windows/win32/fileio/file-attribute-constants

learn.microsoft.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2023/12/20151725/Windows-CLFS-five-exploits-ransomware_part1_en_09.png

media.kasperskycontenthub.com