41554 blogs · 4,450,554 posts Claim your blog

Record · corpus.blog/posts/01a0ca8d-6299-7280-8ee9-8ce67d843064

Windows CLFS and five exploits used by ransomware operators (Exploit #1 – CVE-2022-24521)

Kaspersky Securelist · published 21 December 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securelist.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 18
Words captured: 1,324

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Windows CLFS and five exploits used by ransomware operators Read at the source ↗

Windows CLFS and five exploits used by ransomware operators (Exploit #2 – September 2022) Read at the source ↗

Windows CLFS and five exploits used by ransomware operators (Exploit #3 – October 2022) Read at the source ↗

Windows CLFS and five exploits used by ransomware operators (Exploit #4 – CVE-2023-23376) Read at the source ↗

Windows CLFS and five exploits used by ransomware operators (Exploit #5 – CVE-2023-28252) Read at the source ↗

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24521

msrc.microsoft.com

https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2022/CVE-2022-24521.html

googleprojectzero.github.io

https://learn.microsoft.com/en-us/windows/win32/api/clfsw32/nf-clfsw32-createlogfile

learn.microsoft.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2023/12/20154416/Windows-CLFS-five-exploits-ransomware_part2_en_01.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2023/12/20154425/Windows-CLFS-five-exploits-ransomware_part2_en_02.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2023/12/20154435/Windows-CLFS-five-exploits-ransomware_part2_en_03.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2023/12/20154444/Windows-CLFS-five-exploits-ransomware_part2_en_04.png

media.kasperskycontenthub.com

Zero-day in Windows Kernel Transaction Manager (CVE-2018-8611) Read at the source ↗

https://github.com/oct0xor/presentations/blob/master/2019-02-Overview%20of%20the%20latest%20Windows%20OS%20kernel%20exploits%20found%20in%20the%20wild.pdf

github.com

https://twitter.com/GabrielLandau/status/1597001955909697536

twitter.com

https://learn.microsoft.com/en-us/windows/win32/api/winternl/nf-winternl-ntquerysysteminformation

learn.microsoft.com

PuzzleMaker attacks with Chrome zero-day exploit chain Read at the source ↗

https://twitter.com/yarden_shafir/status/1644766236415258633

twitter.com