OS SecurityBleeping Computer
6.7 — HIGH
Windows version of SprySOCKS Linux malware used to attack govt orgs
Windows variants for the SprySOCKS Linux malware have been used in attacks targeting government organizations in at least four countries. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Windows variants of the SprySOCKS Linux malware have been used in attacks targeting government organizations in at least four countries, with high confidence attributed to the Earth Lusca threat actor.
⚙️Technical Details
💥Impact Assessment
Severity: High
Who Is at Risk
Government organizations in Taiwan, Thailand, Pakistan, and Honduras
🛡️Recommended Actions
1Implement Secure Boot security feature updates to mitigate CVE-2023-24932 vulnerability
2Monitor for suspicious network traffic and TCP port usage
3Regularly update Windows operating systems with the latest security patches
📦Affected Products
Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20H2Microsoft Windows 10 21H2Microsoft Windows 10 22H2Microsoft Windows 11 21H2Microsoft Windows 11 22H2Microsoft Windows Server 2008Microsoft Windows Server 2012
🔐NVD Verified DataVERIFIED
CVE-2023-24932 ↗CVSS 6.7 — MEDIUM
Attack Vector
LOCAL
Complexity
LOW
Vector String
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-863
Affected Products (CPE)
Microsoft Windows 10 1507Microsoft Windows 10 1607Microsoft Windows 10 1809Microsoft Windows 10 20H2Microsoft Windows 10 21H2
Patches & References
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.