{"metadata": {"vulnerability": "CVE-2012-0158", "count": 183, "kinds": {"milestone": 5, "sighting": 148, "kev": 11, "other": 19}}, "data": [{"timestamp": "2011-12-13T00:00:00Z", "date_only": false, "value": "2011-12-13T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2012-0158", "field": "cveMetadata.dateReserved"}, {"timestamp": "2012-04-10T00:00:00Z", "date_only": false, "value": "2012-04-10T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2012-0158", "field": "containers.cna.datePublic"}, {"timestamp": "2012-04-10T21:00:00Z", "date_only": false, "value": "2012-04-10T21:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2012-0158", "field": "cveMetadata.datePublished"}, {"timestamp": "2012-04-10T21:55:00Z", "date_only": false, "value": "2012-04-10T21:55:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XC3W-WQX5-QRF9", "record": "GHSA-XC3W-WQX5-QRF9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2012-04-10T21:55:00Z", "date_only": false, "value": "2012-04-10T21:55Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2012-0158", "record": "GSD-2012-0158", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2012-04-10T21:55:01.687Z", "date_only": false, "value": "2012-04-10T21:55:01.687", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2012-0158", "record": "FKIE_CVE-2012-0158", "field": "published"}, {"timestamp": "2012-04-11T00:00:00Z", "date_only": false, "value": "2012-04-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTA-2012-AVI-206", "record": "CERTA-2012-AVI-206", "field": "last_revision_date"}, {"timestamp": "2012-04-11T00:00:00Z", "date_only": false, "value": "2012-04-11T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTA-2012-AVI-206", "record": "CERTA-2012-AVI-206", "field": "initial_release_date"}, {"timestamp": "2012-04-11T00:00:00Z", "date_only": false, "value": "2012-04-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTA-2012-AVI-206", "record": "CERTA-2012-AVI-206", "field": "revisions.0.revision_date"}, {"timestamp": "2012-04-25T00:00:00Z", "date_only": false, "value": "2012-04-25T00:00:00.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://www.exploit-db.com/exploits/18780", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "f9e9e73f-53a6-4853-a887-e448bf6daf03", "url": "https://www.exploit-db.com/exploits/18780"}, {"timestamp": "2013-07-30T07:25:04Z", "date_only": false, "value": "2013-07-30T07:25:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/51f7672d-eef4-480c-99f0-14dc0a000b01", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "1187fd3c-15a0-4ca1-aeef-4965bc8a6073"}, {"timestamp": "2013-08-02T10:04:46Z", "date_only": false, "value": "2013-08-02T10:04:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/51c2d3d7-2b28-497a-903b-41d0ac1d4fa4", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "edd93869-5516-49e7-8d65-015056684b37"}, {"timestamp": "2013-08-02T10:04:46Z", "date_only": false, "value": "2013-08-02T10:04:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/51c314c4-1edc-4b1c-84bf-2d42ac1d4fa4", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "bac300fd-7963-4cea-91ca-b64fb4cee412"}, {"timestamp": "2013-08-02T10:04:46Z", "date_only": false, "value": "2013-08-02T10:04:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/51c80d97-1c44-42d1-915b-198dac1d4fa4", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "6db32d1b-f374-4812-97a0-5d867854e48e"}, {"timestamp": "2013-08-02T10:04:46Z", "date_only": false, "value": "2013-08-02T10:04:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/51c81103-ce78-44da-a3ac-1990ac1d4fa4", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "bdc21c27-1510-4e3a-9074-f404c83df7f2"}, {"timestamp": "2013-08-06T07:13:50Z", "date_only": false, "value": "2013-08-06T07:13:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5200a1fb-5808-4def-a8b3-1673ac1d4fa4", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "2739b45b-45b4-45da-b33a-21c3ba7a14ee"}, {"timestamp": "2013-09-05T08:04:16Z", "date_only": false, "value": "2013-09-05T08:04:16.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/52283a6c-8cc8-466b-b1db-5279ac1d4fa4", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "f4547fde-c616-415d-94ec-463ac46a384e"}, {"timestamp": "2013-09-09T09:30:25Z", "date_only": false, "value": "2013-09-09T09:30:25.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/522d76d9-4a24-48d2-82bd-39d0ac1d4fa4", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "1135ab0c-17b1-498f-8a6c-55d5b77c24ef"}, {"timestamp": "2013-09-19T14:49:43Z", "date_only": false, "value": "2013-09-19T14:49:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/523b0e26-4208-4c6c-aadc-03ebac1d4fa4", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "2c8f7739-fa2a-4cea-afe6-5dc727f1219a"}, {"timestamp": "2013-10-14T09:11:24Z", "date_only": false, "value": "2013-10-14T09:11:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/525bb51c-1638-44b7-9a9a-61a5950d2109", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "14ba2a8e-74ea-465d-9762-a8d1e411e8e9"}, {"timestamp": "2013-10-25T07:31:28Z", "date_only": false, "value": "2013-10-25T07:31:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/526a1e04-7228-4014-86ed-303fac1d4fa4", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "c2266e65-864f-4032-ba29-6c7c26520c06"}, {"timestamp": "2013-11-01T09:37:33Z", "date_only": false, "value": "2013-11-01T09:37:33.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5273763a-14f8-4b0f-8e1d-4d98950d2109", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "db1a0b6c-fcfe-4d56-b470-207a67d78497"}, {"timestamp": "2013-11-08T09:23:16Z", "date_only": false, "value": "2013-11-08T09:23:16.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/527cacdd-ac8c-4a20-92da-4391950d2109", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "f2486ce8-375f-4c62-9b96-d4c24e16e7b2"}, {"timestamp": "2014-02-17T15:37:59Z", "date_only": false, "value": "2014-02-17T15:37:59.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/53022aa8-39ec-48d5-ab67-4d3f950d2109", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "836f7143-bda7-4a44-af01-6cc68d02d9cd"}, {"timestamp": "2014-02-21T13:41:05Z", "date_only": false, "value": "2014-02-21T13:41:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5307563e-e830-42c4-bb66-505dac1d4fa4", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "5ea45eb2-55e7-43bf-a474-3f7e05866406"}, {"timestamp": "2014-02-26T10:22:08Z", "date_only": false, "value": "2014-02-26T10:22:08.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/530dbf2e-0140-4a3a-8495-ed97950d2109", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "76f52b50-fd2a-43b3-8a27-549aa45b2c62"}, {"timestamp": "2014-03-19T16:19:28Z", "date_only": false, "value": "2014-03-19T16:19:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5329c2b5-cb40-4448-90b4-0f1418689696", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "8c309895-cea7-4e48-925c-de4126d53775"}, {"timestamp": "2014-04-15T11:04:44Z", "date_only": false, "value": "2014-04-15T11:04:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/534d11cb-c274-4c5c-8aeb-6bf0ac1d4fa4", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "a2de5f58-1179-4ff5-a4e1-fed6c8ca1ed1"}, {"timestamp": "2014-04-15T12:25:28Z", "date_only": false, "value": "2014-04-15T12:25:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/534d251f-9744-46e7-b2bc-6bf0ac1d4fa4", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "45e3d09b-3fbd-4240-bec8-b234645774cb"}, {"timestamp": "2014-05-08T10:08:14Z", "date_only": false, "value": "2014-05-08T10:08:14.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/536b573e-7524-430d-8d5a-36faac1d4fa4", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "1e354cbb-a65c-4a71-b685-e6cb19ce45d9"}, {"timestamp": "2014-05-09T06:17:01Z", "date_only": false, "value": "2014-05-09T06:17:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/536c7295-6820-46d2-9b4b-4c18950d2109", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "253c9780-de3f-4fe6-b7cf-060cdbc94dc7"}, {"timestamp": "2014-05-29T11:41:16Z", "date_only": false, "value": "2014-05-29T11:41:16.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/53871aeb-01c8-4af8-9b31-3ea4950d2109", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "6ae10a61-cebd-4f7e-a35e-1f192e195d03"}, {"timestamp": "2014-06-03T16:27:11Z", "date_only": false, "value": "2014-06-03T16:27:11.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/538df4f4-9160-42f3-9d9a-44a1950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "6bba00bd-fd6a-4b07-902a-fad63cb9bc71"}, {"timestamp": "2014-06-04T18:41:05Z", "date_only": false, "value": "2014-06-04T18:41:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/538f6824-0844-479d-8d7d-4272950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "92f13f80-49aa-4edb-8c22-52cbe724876b"}, {"timestamp": "2014-07-11T13:17:53Z", "date_only": false, "value": "2014-07-11T13:17:53.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/53bfe055-9b00-4c57-a9fa-45ff950d2109", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "ac5a10b4-2503-48e5-9009-de7bff436971"}, {"timestamp": "2014-09-01T11:56:40Z", "date_only": false, "value": "2014-09-01T11:56:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/54045e90-efb8-41b2-b429-4b81950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "4a91bd6e-dbb1-48c0-b4a0-3c67028a9673"}, {"timestamp": "2014-09-04T08:26:12Z", "date_only": false, "value": "2014-09-04T08:26:12.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/54082165-ebb4-449c-b085-caa6950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "3b15a822-d6dc-45fc-b5c4-3d4c06e8382c"}, {"timestamp": "2014-11-11T23:51:50Z", "date_only": false, "value": "2014-11-11T23:51:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5462a024-eed8-4057-9a85-3030950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "93057ca0-0c91-4ed6-a93e-daf2781d40eb"}, {"timestamp": "2014-11-13T21:32:50Z", "date_only": false, "value": "2014-11-13T21:32:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/54651e3e-3934-4d34-9396-956a950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "ea0fd11a-73b1-4bfa-aa58-562b235bafc9"}, {"timestamp": "2014-11-16T14:39:12Z", "date_only": false, "value": "2014-11-16T14:39:12.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5468b5d5-d060-4fd8-959f-1ad9950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "b0f43e51-d1e0-4da7-a3a6-48144d39c04e"}, {"timestamp": "2014-11-24T11:11:33Z", "date_only": false, "value": "2014-11-24T11:11:33.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/547311c0-3fdc-4968-85fa-058d950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "78641adb-b6b8-4433-85a9-26e2bc251d55"}, {"timestamp": "2014-12-10T10:51:32Z", "date_only": false, "value": "2014-12-10T10:51:32.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5488209c-b26c-4cf5-99db-418b950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "2ec92717-b262-4c8b-b75f-acae9ecdd892"}, {"timestamp": "2015-01-21T12:20:20Z", "date_only": false, "value": "2015-01-21T12:20:20.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/54bf9923-7798-4610-bc55-4cee950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "b67b5acb-9414-42dd-ad59-203e269de869"}, {"timestamp": "2015-03-12T07:46:13Z", "date_only": false, "value": "2015-03-12T07:46:13.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/55014406-fd90-4fc1-a814-4638950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "bf42012c-d0fe-4ce5-a369-1002ab97fdc3"}, {"timestamp": "2015-03-26T19:40:02Z", "date_only": false, "value": "2015-03-26T19:40:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/55145b11-5c04-4ec3-a3e1-404bc0a87a6c", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "68e475b0-cb72-4e11-96e3-4a4ca8a8276d"}, {"timestamp": "2015-04-09T14:34:48Z", "date_only": false, "value": "2015-04-09T14:34:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/55268112-ef54-4391-b679-740e950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "213e8cd0-fa63-46b7-b056-0eb51bbddcc0"}, {"timestamp": "2015-04-15T07:32:40Z", "date_only": false, "value": "2015-04-15T07:32:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/552e130b-470c-49c0-9a75-4512950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "02bbe828-89c3-44e7-ba00-936beb352480"}, {"timestamp": "2015-05-04T21:46:27Z", "date_only": false, "value": "2015-05-04T21:46:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5547e869-01a8-4e23-8016-d61c950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "99fdda1c-28bb-4c46-81b7-e9864f00eb5b"}, {"timestamp": "2015-05-21T06:31:59Z", "date_only": false, "value": "2015-05-21T06:31:59.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/555d76a7-7264-4792-a1b0-4588950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "fb0bc154-2560-4e18-b0f6-fcd46c0cb6cb"}, {"timestamp": "2015-05-21T20:52:30Z", "date_only": false, "value": "2015-05-21T20:52:30.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/555e453e-d574-48e3-a6af-f12d950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "e8e5b16b-f6cc-4922-b556-e2527c89bb2d"}, {"timestamp": "2015-05-22T06:02:31Z", "date_only": false, "value": "2015-05-22T06:02:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/555ec65c-0634-4bb0-91ba-c499950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "dc2c239f-d9ec-4b16-9c5d-832dd77f7667"}, {"timestamp": "2015-06-25T09:31:34Z", "date_only": false, "value": "2015-06-25T09:31:34.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/558bc951-020c-4308-9ffa-67dc950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "449d993b-68c6-4ef7-9cef-2a3c2c195801"}, {"timestamp": "2015-06-25T11:19:12Z", "date_only": false, "value": "2015-06-25T11:19:12.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/558be34e-c3fc-44c9-a501-443d950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "1f131288-562b-4593-8ef1-cfc57bfe9326"}, {"timestamp": "2015-07-29T15:39:55Z", "date_only": false, "value": "2015-07-29T15:39:55.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/55b8f354-00d4-4d83-8b0a-4ca0950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "cfc6f5c8-97be-4096-9b88-f5a97d3fc18b"}, {"timestamp": "2015-08-25T07:01:07Z", "date_only": false, "value": "2015-08-25T07:01:07.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/55dc126c-1580-44c0-a6bd-44ba950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "18d07fdf-d775-42a0-a56d-fdcc8a131585"}, {"timestamp": "2015-09-07T12:19:56Z", "date_only": false, "value": "2015-09-07T12:19:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/55c752c4-7edc-4a24-8d62-4a7b950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "4ad5c973-74e2-4adc-86c5-da01ba475721"}, {"timestamp": "2015-09-16T17:50:28Z", "date_only": false, "value": "2015-09-16T17:50:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/55f9aaf2-8fb4-4051-ad0f-4948950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "30211f54-7810-415f-a2b9-44e7205510ca"}, {"timestamp": "2015-09-21T10:02:23Z", "date_only": false, "value": "2015-09-21T10:02:23.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/55fc725a-6828-4ffe-a197-4e6f950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "52a2cbef-31f7-4097-9faa-bf94d923e68e"}, {"timestamp": "2015-11-16T12:33:41Z", "date_only": false, "value": "2015-11-16T12:33:41.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5649cccc-7d44-4dc1-9dcd-9c86950d210b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "36f4c9a8-4218-4986-96f9-62f3f6349374"}, {"timestamp": "2015-12-29T13:03:58Z", "date_only": false, "value": "2015-12-29T13:03:58.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5682812e-d9a8-4451-8720-6152bce2ab96", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "69237c99-d7e6-4e46-b8ba-a996dc744448"}, {"timestamp": "2015-12-29T15:08:28Z", "date_only": false, "value": "2015-12-29T15:08:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/56829e5c-6100-4241-a203-b2fe950d210f", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "2587c7fb-5030-43b5-89c9-7098db93706b"}, {"timestamp": "2016-01-26T10:59:20Z", "date_only": false, "value": "2016-01-26T10:59:20.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/56a75072-f048-40ad-9b63-4aa7bce2ab96", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "a2715ab9-f218-49db-a517-1bfebc1d8ca5"}, {"timestamp": "2016-02-02T07:58:48Z", "date_only": false, "value": "2016-02-02T07:58:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/56b06135-452c-4b99-bd16-4981950d210f", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "a58e3db9-5e23-4504-aee7-beb676094a58"}, {"timestamp": "2016-03-15T13:29:02Z", "date_only": false, "value": "2016-03-15T13:29:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/56e80e1b-1d78-48ed-85fa-299995ca48b7", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "1039dada-d491-495e-99ce-d1637f9cea25"}, {"timestamp": "2016-04-06T09:53:02Z", "date_only": false, "value": "2016-04-06T09:53:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5704db67-92d0-4815-bd95-2f97bce2ab96", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "8fc71d69-d65a-4b16-a3fb-954776d0fab2"}, {"timestamp": "2016-04-18T19:30:24Z", "date_only": false, "value": "2016-04-18T19:30:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/57153590-f73c-49fa-be4b-4737950d210f", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "594bfe0b-de47-41e4-adae-cefedb818fe7"}, {"timestamp": "2016-05-16T13:15:41Z", "date_only": false, "value": "2016-05-16T13:15:41.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5703a543-4dc0-46e4-bac6-482f95ca48b7", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "9d05b384-701d-4f35-8e0d-f8008156102f"}, {"timestamp": "2016-08-16T12:25:12Z", "date_only": false, "value": "2016-08-16T12:25:12.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/57b30626-aa80-4c4f-99bb-707595ca48b7", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "8571deb3-e8d6-4d97-b40d-c0121ef39be2"}, {"timestamp": "2016-11-17T16:24:13Z", "date_only": false, "value": "2016-11-17T16:24:13.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/582dd48e-66bc-40c1-ae49-6fe8d56c6cd2", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "1ce01ff6-910d-42af-a7eb-f58339ca4c4f"}, {"timestamp": "2018-05-29T15:50:33Z", "date_only": false, "value": "2018-05-29T15:50:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms12_027_mscomctl_bof.rb", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "6c4a1a22-0344-414e-97a2-56bdcf214162", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms12_027_mscomctl_bof.rb"}, {"timestamp": "2018-10-12T19:57:01Z", "date_only": false, "value": "2018-10-12T19:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2012-0158", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2018-10-12T22:02:00Z", "date_only": false, "value": "2018-10-12T22:02Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2012-0158", "record": "GSD-2012-0158", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2018-10-17T16:24:55Z", "date_only": false, "value": "2018-10-17T16:24:55.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/57863db2-b544-4758-b291-7a5c95ca48b7", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "e168d961-de5e-4112-a991-38e8b29372ef"}, {"timestamp": "2019-02-19T16:21:56Z", "date_only": false, "value": "2019-02-19T16:21:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5c6c2bf0-560c-4fea-bd89-1638c0a80108", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "a3b44a5a-6166-4fd0-ac3f-f2ffd079bcc0"}, {"timestamp": "2019-06-18T06:53:33Z", "date_only": false, "value": "2019-06-18T06:53:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Pen7esting/209", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "2cafc199-8d33-46b6-a215-1c8bca4dd016", "content": "[PoC] 2010~2018 MS Office 0-day/1-day exploit-case-study#OpenXMLTag#RTF#ActiveX#UAF#TIFF#EPS#Moniker\n\nCVE-2010-3333\nCVE-2014-1761\nCVE-2016-7193\nCVE-2015-1641\nCVE-2017-11826\nCVE-2012-0158\nCVE-2012-1856\nCVE-2015-1642\nCVE-2014-6352\nCVE-2015-0097https://t.co/MHJ5xtGSKZ\u2014 Jin Wook (@wugeej) June 14, 2019", "url": "https://t.me/Pen7esting/209"}, {"timestamp": "2020-02-07T07:05:41Z", "date_only": false, "value": "2020-02-07T07:05:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/is_n3ws/34", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "338874e6-f56d-4ce8-8b04-57351b951ba7", "content": "\u200c\u041a\u043e\u043c\u0430\u043d\u0434\u0430 Recorded Future \u043f\u0440\u043e\u0448\u0435\u0440\u0441\u0442\u0438\u043b\u0430 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u0434\u0430\u0440\u043a\u0432\u0435\u0431 \u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0433\u043e\u0434\u0430\u043c.\u00a0\n\n\n\u200b\u200bCVE-2018-15982\nis a use-after-free in the Flash\u2019s file package com.adobe.tvsdk.mediacore.metadata that can be exploited to deliver and execute malicious code on a victim\u2019s computer. Exploit vector: rtf document with flash object.\n\nCVE-2018-8174\nWindows VBScript Engine Remote Code Execution Vulnerability. Exploit vector:\u00a0 An attacker could embed an ActiveX control marked \"safe for initialization\" in an application or Microsoft Office document.\n\nCVE-2017-11882\nVulnerability in an older version of the Office Equation Editor. Exploit vector: RTF file downloads and runs multiple scripts of different types (VBScript, PowerShell, PHP, others) to download the payload.\n\nCVE-2018-4878\nFlash Player vulnerability. Exploit vector: The Excel file carrying an embedded SWF file with the exploit.\n\nCVE-2019-0752\nA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. Exploit vector: In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked \"safe for initialization\" in an application or Microsoft Office document that hosts the IE rendering engine.\n\nCVE-2017-0199\nMS Office zero-day vulnerability. Exploit vector: Microsoft Word RTF (Rich Text Format) document.\n\nCVE-2015-2419\nJScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"JScript9 Memory Corruption Vulnerability.\"\n\nCVE-2018-20250\nWinRAR vulnerability that allows attackers to extract a malicious executable to one of the Windows Startup folder to be executed every time the system is booted.\n\nCVE-2017-8750\nA remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory.\u00a0 Exploit vector: An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers.\n\nCVE-2012-0158\nA buffer overflow vulnerability in the\u00a0 ListView / TreeView ActiveX controls in the MSCOMCTL.OCX library. The malicious code can be triggered by a specially crafted DOC or RTF file for MS Office versions 2003, 2007 and 2010.\n\nhttps://www.helpnetsecurity.com/2020/02/06/most-exploited-vulnerabilities-2019/", "url": "https://t.me/is_n3ws/34"}, {"timestamp": "2020-08-13T11:29:51Z", "date_only": false, "value": "2020-08-13T11:29:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/842", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "528c74fa-cd18-4f8d-b3ab-3968ed044979", "content": "\u041c\u044b \u043f\u043e\u0437\u0430\u0432\u0447\u0435\u0440\u0430 \u043e\u0431\u0435\u0449\u0430\u043b\u0438 \u0434\u0430\u0442\u044c \u043a\u0440\u0430\u0442\u043a\u0438\u0439 \u043e\u0431\u0437\u043e\u0440 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 APT-C-01 \u043e\u043d\u0430 \u0436\u0435 PoisonVine \u0438 GreenSpot, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0432 \u043e\u0431\u0437\u043e\u0440\u0430\u0445 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0444\u043e\u0441\u0435\u043a\u0430. \u0412\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u043c.\n\n\u041a\u0441\u0442\u0430\u0442\u0438, \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u0444\u0430\u043a\u0442, \u043f\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0444\u043e\u0441\u0435\u043a \u0432\u0435\u043d\u0434\u043e\u0440\u0430 Qihoo 360, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u0444\u043e\u0440\u043c\u0430\u0442 \"APT-C-xx\" \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f, \u0433\u043e\u0440\u0434\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 APT-C-00 \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u0432\u044c\u0435\u0442\u043d\u0430\u043c\u0441\u043a\u043e\u0439 Ocean Lotus (\u043c\u044b \u043f\u0440\u043e \u043d\u0438\u0445 \u043f\u0438\u0441\u0430\u043b\u0438 \u0432\u043e\u0442 \u0442\u0443\u0442). \u0412\u0438\u0434\u0438\u043c\u043e, \u044d\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u043f\u0440\u043e\u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e Qihoo 360 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438. \u041d\u0443, \u0438\u043b\u0438 \u0441\u0430\u043c\u0430\u044f \u0433\u0440\u043e\u0437\u043d\u0430\u044f \u0441 \u0438\u0445 \u0442\u043e\u0447\u043a\u0438 \u0437\u0440\u0435\u043d\u0438\u044f.\n\n\u0412\u0435\u0440\u043d\u0435\u043c\u0441\u044f \u043a APT-C-01. \u0414\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043a\u043e\u0433\u0434\u0430 \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043c\u044b, \u043a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u043d\u0435 \u043d\u0430\u0448\u043b\u0438. \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0430\u044f Antiy \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 PoisonVine \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a 2007 \u0433\u043e\u0434\u0443. \u0422\u043e\u0433\u0434\u0430 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0430\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0434 \u0441\u0432\u043e\u0438 \u043d\u0443\u0436\u043d\u044b opensource \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0433\u043e \u041f\u041e. \u041a \u043f\u0440\u0438\u043c\u0435\u0440\u0443, \u0434\u043b\u044f \u0443\u043f\u0430\u043a\u043e\u0432\u043a\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 RAR (\u043a\u0430\u0436\u0435\u0442\u0441\u044f, \u0433\u0434\u0435-\u0442\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043c\u044b \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0438). \u0426\u0435\u043b\u044c\u044e \u0430\u0442\u0430\u043a \u044f\u0432\u043b\u044f\u043b\u0441\u044f \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043d\u0435\u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c, \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u0438 \u043d\u0430\u0432\u044b\u043a\u0430\u043c\u0438 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438, \u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u043c\u0430\u043d\u043e\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0432\u0437\u044f\u0442\u044b\u0445 \u0438\u0437 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0436\u0435 \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 PoisonVine, \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u0432 2011 \u0433\u043e\u0434\u0443. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u0430\u0442\u0430\u043a \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0438\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u044f\u0432\u043b\u044f\u043b\u0441\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433, \u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0446\u0435\u043b\u044f\u043c\u0438 - \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u041d\u0418\u0418, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043e\u0431\u043e\u0440\u043e\u043d\u043a\u043e\u0439 \u0438 \u0430\u0432\u0438\u0430\u0446\u0438\u0435\u0439. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043d\u0430\u0432\u044b\u043a\u0438 PoisonVine \u0432\u044b\u0440\u043e\u0441\u043b\u0438, \u043e\u043d\u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0441\u0432\u0435\u0436\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0435 RAT \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c infostealer'\u0430. \n\n\u041f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0443 \u043d\u0438\u0445 \u0438 \u0441\u0432\u043e\u0438 \u0430\u0432\u0442\u043e\u0440\u0441\u043a\u0438\u0435 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0438 \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043e\u0432 \u043e\u0442 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u043e\u0433\u043e \u041f\u041e. \u041a \u043f\u0440\u0438\u043c\u0435\u0440\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f CVE-2012-0158, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e Microsoft Office \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a RCE, \u0445\u0430\u043a\u0435\u0440\u044b \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u044f\u0442\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0435 \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 RTF, \u043a\u0430\u043a \u044d\u0442\u043e \u0434\u0435\u043b\u0430\u043b\u043e\u0441\u044c \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0430 \u0432 \u0444\u0430\u0439\u043b\u044b MHT, \u0447\u0442\u043e \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u044f\u043b\u043e \u0435\u0433\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435.\n\n\u0414\u0440\u0443\u0433\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2014-4114, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043b\u0438\u043d\u0435\u0439\u043a\u0443 \u041e\u0421 Windows \u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, PoisonVine \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0435\u0449\u0435 \u0434\u043e \u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2014 \u0433\u043e\u0434\u0430. \u041b\u0438\u0431\u043e \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0446\u044b \u043a\u0443\u043f\u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u043d\u0435\u0439, \u043b\u0438\u0431\u043e \u043f\u0435\u0440\u0432\u044b\u0435 \u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438.\n\n\u0412 \u043b\u044e\u0431\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0438\u0445 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432\u044b\u0440\u043e\u0441.\n\n\u0412 2017 \u0433\u043e\u0434\u0443 PoisonVine \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0443\u044e \u043c\u043e\u0449\u043d\u0443\u044e \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u0443\u044e \u043a\u0438\u0431\u0435\u0440\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0442\u0438\u0432 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432. \u041e\u043d\u0438 \u0432\u043e\u0432\u0441\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0435 \u0442\u0440\u043e\u044f\u043d\u044b Poison Ivy \u0438 Gh0st, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u044b ZXShell, \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0434 \u0440\u0430\u0437\u043d\u044b\u0435 \u0432\u0438\u0434\u044b \u0446\u0435\u043b\u0435\u0439 \u0438 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043e\u0442 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043e\u0432.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0445 \u0441\u043b\u043e\u0432 \u0434\u043b\u044f \u0441\u0442\u0430\u0440\u0442\u0430 \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u043b\u0438 \"\u0430\u0440\u043c\u0438\u044f\", \"\u0432\u043e\u0439\u043d\u0430\" \u0438 \u043f\u0440. (\u0432\u0441\u0435\u0433\u043e \u0434\u0432\u0435\u043d\u0430\u0434\u0446\u0430\u0442\u044c \u0442\u0435\u0440\u043c\u0438\u043d\u043e\u0432), \u0447\u0442\u043e \u0434\u0430\u0435\u0442 \u0447\u0435\u0442\u043a\u043e\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0438\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\u0412 2018-2020 \u0433\u043e\u0434\u0430\u0445 APT-C-01 \u043f\u0440\u043e\u0432\u0435\u043b\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0443\u044e \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u0438\u0432 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u043e\u043f\u044f\u0442\u044c \u0436\u0435 \u044f\u0432\u043b\u044f\u043b\u0441\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0432\u0437\u044f\u0442\u0438\u044f \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u0438\u0445 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u044f\u0449\u0438\u043a\u043e\u0432.\n\n\u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0445\u0430\u043a\u0435\u0440\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043c\u043d\u043e\u0433\u043e \u043e\u0448\u0438\u0431\u043e\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0441 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0434\u043e\u043b\u0435\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0445, \u043a\u0430\u043a \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u043a \u0422\u0430\u0439\u0432\u0430\u043d\u044e - \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0438\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0433\u043e \u044f\u0437\u044b\u043a\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0439\u0441\u044f \u0432 \u0448\u0440\u0438\u0444\u0442\u0430\u0445 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u0445 \u0432 \u043a\u043e\u0434\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043e\u0432, \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0441\u043f\u0440\u044f\u0442\u0430\u043d\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u0432 \u0422\u0430\u0439\u0431\u044d\u0439 \u0438 \u043f\u0440.\n\n\u041e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c, \u0447\u0442\u043e \u0441\u0440\u0435\u0434\u0438 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431 \u0435\u0441\u0442\u044c \u0434\u0432\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0438\u0433\u0440\u0430\u0442\u044c \u0440\u043e\u043b\u044c \u043a\u0443\u0440\u0430\u0442\u043e\u0440\u043e\u0432 PoisonVine. \u041f\u0435\u0440\u0432\u0430\u044f - \u0411\u044e\u0440\u043e \u0432\u043e\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 (MIB) \u041c\u0438\u043d\u043e\u0431\u043e\u0440\u043e\u043d\u044b, \u0430 \u0432\u0442\u043e\u0440\u0430\u044f - 5 \u0414\u0435\u043f\u0430\u0440\u0442\u0430\u043c\u0435\u043d\u0442 \u0411\u044e\u0440\u043e \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (NSB). \u0418 \u0435\u0441\u043b\u0438 \u0432 \u043f\u043e\u043b\u044c\u0437\u0443 \u043f\u0435\u0440\u0432\u043e\u0439 \u043c\u043e\u0436\u0435\u0442 \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043d\u043d\u043e\u0441\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0432 \u0432\u043e\u0435\u043d\u043d\u043e\u0439 \u0442\u0435\u043c\u0430\u0442\u0438\u043a\u0435, \u0442\u043e \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u0437\u0430 \u0432\u0442\u043e\u0440\u043e\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u0442 \u0444\u0430\u043a\u0442, \u0447\u0442\u043e NSB \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0430\u0435\u0442 \u0441 \u0410\u041d\u0411, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u0441\u0442\u0430\u0442\u044c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0445\u0441\u044f PoisonVine 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n#APT #APTC01 #PoisonVine #GreenSpot", "url": "https://t.me/true_secator/842"}, {"timestamp": "2020-10-09T13:37:28Z", "date_only": false, "value": "2020-10-09T13:37:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ceffe993-fba5-4117-9d95-cc501e161029", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "f1810bbf-c9a5-4598-9b72-f78226a39020"}, {"timestamp": "2020-10-09T14:12:41Z", "date_only": false, "value": "2020-10-09T14:12:41.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d0b6849d-1dfc-4bbc-b36c-1d22340394d3", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "dec35bbd-24c1-4d64-9f70-6b90c24acdb8"}, {"timestamp": "2020-10-09T14:23:50Z", "date_only": false, "value": "2020-10-09T14:23:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ac986ebb-348a-4ad8-a64f-0afcac8f9b9b", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "c517fa97-9b58-46f8-9513-196455071d05"}, {"timestamp": "2020-10-09T14:26:46Z", "date_only": false, "value": "2020-10-09T14:26:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/c100e80e-5a26-4a63-941c-6e7ac03114c1", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "6f592db3-414c-4d48-bd16-1044577386c5"}, {"timestamp": "2020-10-09T14:38:47Z", "date_only": false, "value": "2020-10-09T14:38:47.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/e27fb2c7-19dd-454a-84df-f7cd2dd67cf4", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "69786b2e-eba1-402d-a292-cfa45a177913"}, {"timestamp": "2020-10-09T15:23:24Z", "date_only": false, "value": "2020-10-09T15:23:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a3427291-2d9c-4195-88f4-d5b979d60d77", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "ef7fcd64-5db3-4fc1-bfc8-1c110b56c62d"}, {"timestamp": "2020-10-09T15:52:59Z", "date_only": false, "value": "2020-10-09T15:52:59.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/0b0f374b-39b1-4229-891b-2defd31fe736", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "df7f9488-4c4a-418e-9af9-3a337d8e9fac"}, {"timestamp": "2020-10-09T16:30:14Z", "date_only": false, "value": "2020-10-09T16:30:14.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/590a11d0-3be4-48a8-aa00-8645ca149e96", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "f74afc38-5485-4f8c-b0bb-e671eacd6d09"}, {"timestamp": "2020-10-09T16:35:58Z", "date_only": false, "value": "2020-10-09T16:35:58.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/21b8cf94-f9f1-467a-9b17-5328dd7dcdf3", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "3674b765-2f80-465d-be0b-6fe83cc6a1d3"}, {"timestamp": "2020-10-09T16:40:53Z", "date_only": false, "value": "2020-10-09T16:40:53.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ea967249-6079-4810-a768-f07661ff3096", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "6edcd8ea-eb6e-4348-b324-adfd9ef56b6f"}, {"timestamp": "2020-10-09T16:43:13Z", "date_only": false, "value": "2020-10-09T16:43:13.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/c0eea752-4619-4683-bcc9-84dcc30de050", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "22720cce-eb82-45a2-8bfa-5ea0aafc7243"}, {"timestamp": "2020-10-09T16:44:12Z", "date_only": false, "value": "2020-10-09T16:44:12.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/76bfc156-52a5-434b-aa6d-78a52a431595", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "8d6551e1-71e3-4dd3-a852-71f57e31b131"}, {"timestamp": "2020-10-09T16:44:51Z", "date_only": false, "value": "2020-10-09T16:44:51.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d8c8bd6e-a761-43dd-b238-0d0911991341", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "6c1c773d-b61d-489c-91c3-383c2ec15b99"}, {"timestamp": "2020-10-09T16:44:55Z", "date_only": false, "value": "2020-10-09T16:44:55.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/50fd2b9c-ca64-448d-9bd4-3fe22e5cbdca", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "4168ace9-c45c-470c-b82c-f1e1b5d4688a"}, {"timestamp": "2020-10-09T16:45:12Z", "date_only": false, "value": "2020-10-09T16:45:12.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/79730556-e1d9-4a50-bb73-bb0092d2e4e7", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "d2baf97a-c07c-46ec-be3d-2ec1b9783981"}, {"timestamp": "2020-10-09T16:45:28Z", "date_only": false, "value": "2020-10-09T16:45:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ac5ab6f4-ee27-4fbc-acb8-6f593235c02a", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "458aa298-179a-4488-8957-6a035b621f7b"}, {"timestamp": "2020-10-09T16:45:46Z", "date_only": false, "value": "2020-10-09T16:45:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/4a9e4fcb-3a75-4bcd-b046-0f82cd61f6c6", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "ab0cfe2d-0427-4562-9ca6-e862c80cf770"}, {"timestamp": "2020-10-09T16:47:06Z", "date_only": false, "value": "2020-10-09T16:47:06.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/4514561c-5c68-4136-99db-9ae7dce626ad", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "4ef40b8d-911a-4f38-a0d6-58e48f81ada8"}, {"timestamp": "2020-10-09T16:47:53Z", "date_only": false, "value": "2020-10-09T16:47:53.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ebeb805c-58b4-438b-ad44-5da0e20cab79", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "e5c615f8-cd44-41f8-b1b9-902cd0d20735"}, {"timestamp": "2020-10-09T16:47:55Z", "date_only": false, "value": "2020-10-09T16:47:55.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f6439b17-6205-42e8-afaf-affbe7a8efb7", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "3516772e-8baf-45fb-9457-4abeb43515f9"}, {"timestamp": "2020-10-09T16:47:57Z", "date_only": false, "value": "2020-10-09T16:47:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/374577ad-53a9-4863-b652-9b0cde5e071c", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "4ad834fe-8639-4955-b6ec-c698b28d309c"}, {"timestamp": "2020-10-09T16:48:47Z", "date_only": false, "value": "2020-10-09T16:48:47.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/8289f31a-659f-45e7-9599-4dca43f38b53", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "a6903fbd-37fe-4964-983f-95458373ffcd"}, {"timestamp": "2020-10-09T16:48:53Z", "date_only": false, "value": "2020-10-09T16:48:53.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/7b284eb8-6017-493a-991e-b070eca015ed", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "32c4b596-afd7-4d62-a4c3-0ca4d3f49063"}, {"timestamp": "2020-10-09T16:48:54Z", "date_only": false, "value": "2020-10-09T16:48:54.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/cc5c41b3-1c1e-4d6e-a546-c1a7718907a3", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "3720f1f4-4d55-4905-98a1-995cbaca4398"}, {"timestamp": "2020-10-09T16:49:05Z", "date_only": false, "value": "2020-10-09T16:49:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b9c7f2d3-28a4-4288-85f8-077ec1908b52", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "af5f221d-7e9a-4c54-a310-25b9a3e1e1f9"}, {"timestamp": "2020-10-09T16:49:26Z", "date_only": false, "value": "2020-10-09T16:49:26.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/31ff4254-82aa-4653-9509-748db839cc08", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "792a5b62-c893-41c9-b04e-af17c46cc8d5"}, {"timestamp": "2020-10-09T16:53:31Z", "date_only": false, "value": "2020-10-09T16:53:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d0f77ac5-fd43-4a0c-8fd5-dba26bc41dfe", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "d41e5bc0-5717-4de2-a254-d94ad635557f"}, {"timestamp": "2020-10-09T16:53:39Z", "date_only": false, "value": "2020-10-09T16:53:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5d1eea29-77ba-4e30-ba18-2c532fb82df4", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "dbc2e6de-3dcc-481a-bcf6-63645cb1c4e3"}, {"timestamp": "2020-10-09T16:54:08Z", "date_only": false, "value": "2020-10-09T16:54:08.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/0da44c27-7232-4deb-8844-a0db8c3affac", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "dfa07c94-af16-4436-a623-d76f21728872"}, {"timestamp": "2020-10-09T16:56:08Z", "date_only": false, "value": "2020-10-09T16:56:08.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ffb55b2c-95bc-4233-8f37-af89e15a6e63", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "eb0df3f9-e5a8-4c53-a2dc-b9a941e1851c"}, {"timestamp": "2020-10-09T16:56:27Z", "date_only": false, "value": "2020-10-09T16:56:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/cfec5829-bbf4-40dd-9d9e-8d11c226710e", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "0f8b86b7-bfa6-4118-aae7-13eb0a370bb7"}, {"timestamp": "2020-10-09T16:56:33Z", "date_only": false, "value": "2020-10-09T16:56:33.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/60d194bf-2b70-43fc-b138-40f6c82137df", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "187da3dc-84e7-4449-923b-23d1104b6431"}, {"timestamp": "2020-10-09T16:57:39Z", "date_only": false, "value": "2020-10-09T16:57:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f658acf9-8570-49c6-b751-a1d29924d5fe", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "2e1c2679-2c21-4b62-bc1a-ea937c677080"}, {"timestamp": "2020-10-09T17:00:32Z", "date_only": false, "value": "2020-10-09T17:00:32.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/edb397c2-5998-4616-ab80-8606ab5ba913", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "409bb75e-6bf5-495d-aa58-2019183a6c85"}, {"timestamp": "2020-10-09T17:02:56Z", "date_only": false, "value": "2020-10-09T17:02:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/902c6df3-0ac8-4c70-a3ef-a2a0638ec2e7", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "c4ff4345-89a7-41ec-a16e-6470850f89eb"}, {"timestamp": "2020-10-09T17:03:48Z", "date_only": false, "value": "2020-10-09T17:03:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/c54aaa26-d035-43d9-910b-50958bd6aa31", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "0a14c1d1-e954-46c1-91ea-b8655f4a0a0d"}, {"timestamp": "2020-10-09T17:04:35Z", "date_only": false, "value": "2020-10-09T17:04:35.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/67bce657-02e5-465f-a794-6e7d17fdfbf7", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "68544122-86a0-4630-a13f-62aca5cd60b9"}, {"timestamp": "2020-10-09T17:05:14Z", "date_only": false, "value": "2020-10-09T17:05:14.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/6bdb849b-ae83-4fd1-8650-9ee3754ba5a5", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "2a8dfaf9-f7ac-4712-b6f4-b52f94a5c203"}, {"timestamp": "2020-10-09T17:05:33Z", "date_only": false, "value": "2020-10-09T17:05:33.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b04c852e-38ff-4b85-bd95-f2c26a38d712", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "b2dbcde4-bdb1-43aa-bb9f-9748d2cd98f0"}, {"timestamp": "2020-10-09T17:05:44Z", "date_only": false, "value": "2020-10-09T17:05:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/52275bb0-8e94-4742-9ba9-431586cad83c", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "df521d02-381a-44e5-848a-3820f9bda9c8"}, {"timestamp": "2020-10-09T17:08:27Z", "date_only": false, "value": "2020-10-09T17:08:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/6a1671d3-73c6-428b-9bae-305e59dcf452", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "90399c49-ba22-4837-b1ba-d3896ac7c423"}, {"timestamp": "2020-10-09T17:13:17Z", "date_only": false, "value": "2020-10-09T17:13:17.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d3bee571-08c4-4ec2-8aaa-b1e584e109b9", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "fbe0caf3-c553-45de-bfe6-3d8f334a2d5e"}, {"timestamp": "2020-10-09T17:19:04Z", "date_only": false, "value": "2020-10-09T17:19:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/237a4b53-77ed-47a5-8efe-8cda05ff3fdd", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "70637885-9613-43de-9459-b623c0ffa9e6"}, {"timestamp": "2020-10-09T17:19:10Z", "date_only": false, "value": "2020-10-09T17:19:10.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/34b4387e-ec7f-48b3-8dbc-c9032a8b4132", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "83947671-8f0a-49bc-94e4-8e36796841a9"}, {"timestamp": "2020-10-09T17:19:34Z", "date_only": false, "value": "2020-10-09T17:19:34.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f51dc81e-1877-4599-9426-1352b5e86012", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "c4e26df1-20f0-4f71-be07-6f32925c5ba7"}, {"timestamp": "2020-10-09T17:19:43Z", "date_only": false, "value": "2020-10-09T17:19:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/1d29f857-4f6c-4747-998c-d6c03f24f5a1", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "ce85191c-0005-4276-9eb0-cb8f9b2c50d7"}, {"timestamp": "2020-10-09T17:28:28Z", "date_only": false, "value": "2020-10-09T17:28:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b2cc665b-c086-47b1-b025-8be9669241d0", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "97e39bb0-e6e3-4e34-b09e-f93ce1d80c49"}, {"timestamp": "2020-10-09T17:32:23Z", "date_only": false, "value": "2020-10-09T17:32:23.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/0a5b53d7-8812-4bab-bf56-3e11299d0401", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "3f0ee503-d032-4383-988c-2cfeb693cec8"}, {"timestamp": "2020-10-09T17:37:03Z", "date_only": false, "value": "2020-10-09T17:37:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b5e5c4b9-544a-49ec-9957-c11f5228fe28", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "c7e6e710-b505-4b74-a8e1-b46a04980ec4"}, {"timestamp": "2020-11-06T15:40:53Z", "date_only": false, "value": "2020-11-06T15:40:53.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/36b8470b-ace9-416e-9994-ca272e4e6f1e", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "3b02c70c-2e08-4ec8-80b4-f82188867ac1"}, {"timestamp": "2021-03-25T07:12:25Z", "date_only": false, "value": "2021-03-25T07:12:25.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/c7244416-f6dc-43cb-934d-67da8c15d123", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "b9153d3e-8faa-4026-9d54-3cbd16a6a0db"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2012-0158", "field": "timestamps.asserted_at", "uuid": "fbb24e87-fd28-4e85-9627-c88f5ee59398", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2012-0158", "field": "timestamps.asserted_at", "uuid": "3f1e4b32-638e-4f3f-9ea6-9b48b356faea", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2012-0158", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2012-0158", "record": "GSD-2012-0158", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2012-0158", "field": "evidence.0.details.added_date", "uuid": "3f1e4b32-638e-4f3f-9ea6-9b48b356faea", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": true, "value": "2021-11-03", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2012-0158", "field": "evidence.0.details.date_added", "uuid": "fbb24e87-fd28-4e85-9627-c88f5ee59398", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2012-0158", "field": "timestamps.first_seen_at", "uuid": "fbb24e87-fd28-4e85-9627-c88f5ee59398", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2012-0158", "field": "timestamps.first_seen_at", "uuid": "3f1e4b32-638e-4f3f-9ea6-9b48b356faea", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2012-0158", "field": "status.status_updated_at", "uuid": "fbb24e87-fd28-4e85-9627-c88f5ee59398", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2012-0158", "field": "status.status_updated_at", "uuid": "3f1e4b32-638e-4f3f-9ea6-9b48b356faea", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2021-11-03T00:00:00Z", "date_only": false, "value": "2021-11-03T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2012-0158", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2021-11-08T08:58:18Z", "date_only": false, "value": "2021-11-08T08:58:18.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "6eea3d6b-dcad-4277-9c4e-e8ddcfbb7abd"}, {"timestamp": "2021-11-20T09:53:52Z", "date_only": false, "value": "2021-11-20T09:53:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "9b3511cf-7d30-4c9c-bbc2-2643b9f117cb"}, {"timestamp": "2022-02-11T17:23:36Z", "date_only": false, "value": "2022-02-11T17:23:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NeKaspersky/1796", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "8aafd232-de00-40b9-a8e8-e0e09f9ee02e", "content": "\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 ModifiedElephant \u0438\u0437\u0431\u0435\u0433\u0430\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u043f\u0440\u043e\u0442\u044f\u0436\u0435\u043d\u0438\u0438 \u0434\u0435\u0441\u044f\u0442\u0438\u043b\u0435\u0442\u0438\u044f\n\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0441 2012-\u0433\u043e \u0433\u043e\u0434\u0430 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0431\u043e\u0440\u0446\u043e\u0432 \u0437\u0430 \u043f\u0440\u0430\u0432\u0430 \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430 \u0438 \u0441\u0432\u043e\u0431\u043e\u0434\u0443 \u0441\u043b\u043e\u0432\u0430, \u044e\u0440\u0438\u0441\u0442\u043e\u0432 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0435\u0439 \u043d\u0430\u0443\u0447\u043d\u044b\u0445 \u043a\u0440\u0443\u0433\u043e\u0432 \u0432 \u0418\u043d\u0434\u0438\u0438 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0442\u0440\u043e\u044f\u043d\u044b \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u043c \u0434\u043b\u044f \u0438\u0445 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438.\n\n\u0418\u0445 \u0430\u0442\u0430\u043a\u0438 \u0438 \u0440\u0430\u043d\u0435\u0435 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u043b\u0438 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u043e\u0432, \u043d\u043e \u0442\u0435 \u0434\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u043b\u0438 \u0438\u0445 \u043e\u0434\u043d\u043e\u0439 APT. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0438\u0437 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437 SentinelLabs \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u2014 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0434\u043d\u043e\u0439 \u0438 \u0442\u043e\u0439 \u0436\u0435 \u043c\u0430\u043b\u0432\u0430\u0440\u0438 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0422\u0435\u0445\u043d\u0438\u043a\u0438 \u0432\u0441\u0435\u0433\u0434\u0430 \u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0438\u0441\u044c \u043d\u0430 \u0444\u0438\u0448\u0438\u043d\u0433, \u043d\u043e \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c:\n\u2022 2013 \u2013 \u043c\u0430\u043b\u0432\u0430\u0440\u044c \u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0441 \u0434\u0432\u043e\u0439\u043d\u044b\u043c\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u043c\u0438 (file.pdf.exe);\n\u2022 2015 \u2013 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0435\u043c \u0430\u0440\u0445\u0438\u0432\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438\u0441\u044c \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f;\n\u2022 2019 \u2013 ModifiedElephant \u043e\u0431\u0437\u0430\u0432\u0435\u043b\u0438\u0441\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0430\u043a\u043e\u043c \u0438 \u043f\u0435\u0440\u0435\u0448\u043b\u0438 \u043e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u0441\u0441\u044b\u043b\u043a\u0430\u043c;\n\u2022 2020 \u2013 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0438\u0435 (~300\u043c\u0431) \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\u0412\u0440\u0435\u043c\u044f \u043e\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CVE-2012-0158, CVE-2013-3906, CVE-2014-1761 \u0438 CVE-2015-1641.\n\nModifiedElephant \u043d\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0437\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0430\u043c\u043e\u043f\u0438\u0441\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043e\u0432, \u0447\u0442\u043e \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u043d\u0435\u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0438\u0445 \u0443\u043c\u0435\u043d\u0438\u0439. \u0427\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u0441\u043b\u043e\u043d\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 RAT NetWire \u0438 DarkComet \u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e \u2014 \u043a\u0435\u0439\u043b\u043e\u0433\u0433\u0435\u0440 \u043d\u0430 visual basic, \u0434\u0430\u0432\u043d\u044b\u043c-\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0444\u043e\u0440\u0443\u043c\u0430\u0445 \u0438 \u043d\u0438 \u0440\u0430\u0437\u0443 \u043d\u0435 \u043f\u0440\u0435\u0442\u0435\u0440\u043f\u0435\u0432\u0448\u0438\u0439 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0441 2012-\u0433\u043e \u0433\u043e\u0434\u0430 (\u0432 SentinelLabs \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0441\u0442\u043e\u043b\u044c \u0430\u043d\u0442\u0438\u043a\u0432\u0430\u0440\u043d\u044b\u0439 \u043e\u0431\u0440\u0430\u0435\u0446 \u043c\u0430\u043b\u0432\u0430\u0440\u044c\u043c\u0435\u0439\u043a\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0442\u0432\u043e\u0440\u0447\u0435\u0441\u0442\u0432\u0430 \u0434\u0430\u0436\u0435 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u041e\u0421).\n@NeKaspersky", "url": "https://t.me/NeKaspersky/1796"}, {"timestamp": "2022-02-14T15:50:35Z", "date_only": false, "value": "2022-02-14T15:50:35.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/cb617be5-1f7e-4e1d-aff0-e654c1c75a8c", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "2875d1b6-8125-4aba-8063-b9db09691d4a"}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2012-0158", "field": "evidence.0.details.due_date", "uuid": "fbb24e87-fd28-4e85-9627-c88f5ee59398", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-03T00:00:00Z", "date_only": true, "value": "2022-05-03", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2012-0158", "record": "GSD-2012-0158", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-04T00:28:29Z", "date_only": false, "value": "2022-05-04T00:28:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XC3W-WQX5-QRF9", "record": "GHSA-XC3W-WQX5-QRF9", "field": "published"}, {"timestamp": "2023-12-13T01:20:14.021Z", "date_only": false, "value": "2023-12-13T01:20:14.021055Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2012-0158", "record": "GSD-2012-0158", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-06T18:16:19.081Z", "date_only": false, "value": "2024-08-06T18:16:19.081Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2012-0158", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-04T08:04:10Z", "date_only": false, "value": "2024-12-04T08:04:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/CxpNtxuwLd40b9eHIrvRz6dxHEgBUTQ1lHn8KKb8izHDrDdx", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "3cb6ae28-f126-4413-a4ba-018f83762db8"}, {"timestamp": "2024-12-24T20:22:53.101Z", "date_only": false, "value": "2024-12-24T20:22:53.101376Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971000", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "108ab106-be08-48ab-b3fe-36f6013123dd", "url": "https://feedsin.space/feed/CISAKevBot/items/2971000"}, {"timestamp": "2025-02-06T03:13:40Z", "date_only": false, "value": "2025-02-06T03:13:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "f2d67108-0f73-454a-8126-8c0a8f190734"}, {"timestamp": "2025-02-10T19:33:55.404Z", "date_only": false, "value": "2025-02-10T19:33:55.404318Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2012-0158", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-10T19:33:55.404Z", "date_only": false, "value": "2025-02-10T19:33:55.404318Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2012-0158", "record": "FKIE_CVE-2012-0158", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-14T10:00:30Z", "date_only": false, "value": "2025-02-14T10:00:30.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/NAUUnLggXkzN0vA99Q0YLS0KogoMOWwX97wwOPBsnv_RBiWs", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "47f6a012-81c2-4e49-9e5e-1362f080c17a"}, {"timestamp": "2025-02-23T02:09:37Z", "date_only": false, "value": "2025-02-23T02:09:37.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "84fe09a4-1894-4d57-a2c1-72e7c04c968a"}, {"timestamp": "2025-02-23T04:09:01Z", "date_only": false, "value": "2025-02-23T04:09:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "87aed71c-b8d8-495d-b7f0-3a5ce55781ee"}, {"timestamp": "2025-04-22T17:30:06Z", "date_only": false, "value": "2025-04-22T17:30:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6973", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "5d8ec058-1f68-4afa-851d-4c6b2a6ecae7", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Symantec \u0432 \u043d\u043e\u0432\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 APT Lotus Panda, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0440\u044f\u0434 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438 \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2024 \u0433\u043e\u0434\u0430 \u043f\u043e \u0444\u0435\u0432\u0440\u0430\u043b\u044c 2025 \u0433\u043e\u0434\u0430.\n\n\u0426\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a \u0441\u0442\u0430\u043b\u0438: \u043c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u0434\u0443\u0448\u043d\u044b\u043c \u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0435\u043c, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0441\u0432\u044f\u0437\u0438 \u0438 \u0441\u0442\u0440\u043e\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f.\n\n\u0410\u0442\u0430\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0438, \u0441\u0442\u0438\u043b\u0435\u0440\u044b \u0438 SSH-\u0443\u0442\u0438\u043b\u0438\u0442\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0446\u0435\u043b\u0435\u0439 \u0430\u0442\u0430\u043a\u0438 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u043b\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0435 \u0432 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438, \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0430\u0432\u0438\u0430\u043f\u0435\u0440\u0435\u0432\u043e\u0437\u043a\u0430\u043c\u0438, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u0434\u0440\u0443\u0433\u043e\u043c \u0441\u043e\u0441\u0435\u0434\u043d\u0435\u043c \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435.\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c \u0418\u0411-\u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f Broadcom, \u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u0443\u0433\u0440\u043e\u0437 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0435\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u0435\u0449\u0435\u00a0\u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u043a\u0430\u043a \u043e \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u043c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 \u0430\u0442\u0430\u043a \u0432 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0432\u0448\u0438\u0445\u0441\u044f \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Cisco Talos \u0441\u0432\u044f\u0437\u0430\u043b\u0430 Lotus Panda \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0438 \u043c\u0435\u0434\u0438\u0439\u043d\u044b\u0439 \u0441\u0435\u043a\u0442\u043e\u0440\u044b \u043d\u0430 \u0424\u0438\u043b\u0438\u043f\u043f\u0438\u043d\u0430\u0445, \u0432\u043e \u0412\u044c\u0435\u0442\u043d\u0430\u043c\u0435, \u0413\u043e\u043d\u043a\u043e\u043d\u0433\u0435 \u0438 \u0422\u0430\u0439\u0432\u0430\u043d\u0435, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u043a\u0430\u043a Sagerunex.\n\n\u0421\u0430\u043c\u0430 Lotus Panda (Billbug, Bronze Elgin, Lotus Blossom, Spring Dragon \u0438 Thrip) \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u0433\u0430\u0442\u044b\u0439 \u043e\u043f\u044b\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0438 \u0432\u043e\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u044d\u0442\u043e\u043c \u0440\u0435\u0433\u0438\u043e\u043d\u0435.\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 2009 \u0433\u043e\u0434\u0430, \u043d\u043e \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0432 \u0446\u0435\u043d\u0442\u0440\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0432 \u0438\u044e\u043d\u0435 2015 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 Palo Alto \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0430\u00a0\u0435\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Microsoft Office (CVE-2012-0158) \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 Elise (Trensil), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 APT\u00a0\u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Windows OLE (CVE-2014-6332) \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u00a0\u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u043c \u043f\u0438\u0441\u044c\u043c\u0435, \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044f\u0441\u044c \u043d\u0430 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u041c\u0418\u0414 \u0424\u0440\u0430\u043d\u0446\u0438\u0438 \u043d\u0430 \u0422\u0430\u0439\u0432\u0430\u043d\u0435, \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0442\u0440\u043e\u044f\u043d\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 Elise, \u0441 \u0443\u0441\u043b\u043e\u0432\u043d\u044b\u043c \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Emissary.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u043e\u043b\u043d\u0435 \u0430\u0442\u0430\u043a, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 Symantec, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b Trend Micro (tmdbglog.exe) \u0438 Bitdefender (bds.exe) \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432 \u0434\u043b\u044f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u044d\u0442\u0430\u043f\u0430, \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b.\n\n\u0414\u0432\u043e\u0438\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b Bitdefender \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 DLL, \u0445\u043e\u0442\u044f \u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u0438\u0440\u043e\u0434\u0430 \u0444\u0430\u0439\u043b\u0430 \u043d\u0435\u044f\u0441\u043d\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u043c \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0430\u0441\u043f\u0435\u043a\u0442\u043e\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0410\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u043b\u043e\u0436\u0438\u043b\u0438 \u043f\u0443\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Sagerunex, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e Lotus Panda. \n\n\u041e\u043d \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0445\u043e\u0441\u0442\u0435, \u0435\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u044b \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e SSH \u0438 \u0434\u0432\u0430 \u0441\u0442\u0438\u043b\u0435\u0440\u0430 ChromeKatz \u0438 CredentialKatz, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0438 \u0444\u0430\u0439\u043b\u044b cookie, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0435\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Google Chrome.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 Zrok, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u043b\u0443\u0436\u0431\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0432\u043d\u0443\u0442\u0440\u0438.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b \u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c datechanger.exe, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u0443\u0442\u0430\u0442\u044c \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u043e\u0432 \u043f\u0440\u0438 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "url": "https://t.me/true_secator/6973"}, {"timestamp": "2025-04-22T18:13:59Z", "date_only": false, "value": "2025-04-22T18:13:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/5571", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "41e16d5b-ed68-4f80-9704-2bed08de06ae", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Symantec \u0432 \u043d\u043e\u0432\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u043e \u043d\u043e\u0432\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 APT Lotus Panda, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0440\u044f\u0434 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438 \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2024 \u0433\u043e\u0434\u0430 \u043f\u043e \u0444\u0435\u0432\u0440\u0430\u043b\u044c 2025 \u0433\u043e\u0434\u0430.\n\n\u0426\u0435\u043b\u044f\u043c\u0438 \u0430\u0442\u0430\u043a \u0441\u0442\u0430\u043b\u0438: \u043c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u0434\u0443\u0448\u043d\u044b\u043c \u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0435\u043c, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0441\u0432\u044f\u0437\u0438 \u0438 \u0441\u0442\u0440\u043e\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f.\n\n\u0410\u0442\u0430\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0438, \u0441\u0442\u0438\u043b\u0435\u0440\u044b \u0438 SSH-\u0443\u0442\u0438\u043b\u0438\u0442\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0446\u0435\u043b\u0435\u0439 \u0430\u0442\u0430\u043a\u0438 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u043b\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0435 \u0432 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438, \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0430\u0432\u0438\u0430\u043f\u0435\u0440\u0435\u0432\u043e\u0437\u043a\u0430\u043c\u0438, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u0434\u0440\u0443\u0433\u043e\u043c \u0441\u043e\u0441\u0435\u0434\u043d\u0435\u043c \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435.\n\n\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c \u0418\u0411-\u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f Broadcom, \u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u0443\u0433\u0440\u043e\u0437 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0435\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u0435\u0449\u0435\u00a0\u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u043a\u0430\u043a \u043e \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u043c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 \u0430\u0442\u0430\u043a \u0432 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438, \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0432\u0448\u0438\u0445\u0441\u044f \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Cisco Talos \u0441\u0432\u044f\u0437\u0430\u043b\u0430 Lotus Panda \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0438 \u043c\u0435\u0434\u0438\u0439\u043d\u044b\u0439 \u0441\u0435\u043a\u0442\u043e\u0440\u044b \u043d\u0430 \u0424\u0438\u043b\u0438\u043f\u043f\u0438\u043d\u0430\u0445, \u0432\u043e \u0412\u044c\u0435\u0442\u043d\u0430\u043c\u0435, \u0413\u043e\u043d\u043a\u043e\u043d\u0433\u0435 \u0438 \u0422\u0430\u0439\u0432\u0430\u043d\u0435, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0431\u044d\u043a\u0434\u043e\u0440\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u043a\u0430\u043a Sagerunex.\n\n\u0421\u0430\u043c\u0430 Lotus Panda (Billbug, Bronze Elgin, Lotus Blossom, Spring Dragon \u0438 Thrip) \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u0433\u0430\u0442\u044b\u0439 \u043e\u043f\u044b\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0438 \u0432\u043e\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u044d\u0442\u043e\u043c \u0440\u0435\u0433\u0438\u043e\u043d\u0435.\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 2009 \u0433\u043e\u0434\u0430, \u043d\u043e \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0432 \u0446\u0435\u043d\u0442\u0440\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0432 \u0438\u044e\u043d\u0435 2015 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 Palo Alto \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0430\u00a0\u0435\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Microsoft Office (CVE-2012-0158) \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 Elise (Trensil), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 APT\u00a0\u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Windows OLE (CVE-2014-6332) \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u00a0\u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u043c \u043f\u0438\u0441\u044c\u043c\u0435, \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044f\u0441\u044c \u043d\u0430 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u041c\u0418\u0414 \u0424\u0440\u0430\u043d\u0446\u0438\u0438 \u043d\u0430 \u0422\u0430\u0439\u0432\u0430\u043d\u0435, \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0442\u0440\u043e\u044f\u043d\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0441 Elise, \u0441 \u0443\u0441\u043b\u043e\u0432\u043d\u044b\u043c \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Emissary.\n\n\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u043e\u043b\u043d\u0435 \u0430\u0442\u0430\u043a, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 Symantec, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b Trend Micro (tmdbglog.exe) \u0438 Bitdefender (bds.exe) \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432 \u0434\u043b\u044f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u044d\u0442\u0430\u043f\u0430, \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b.\n\n\u0414\u0432\u043e\u0438\u0447\u043d\u044b\u0439 \u0444\u0430\u0439\u043b Bitdefender \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 DLL, \u0445\u043e\u0442\u044f \u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u0438\u0440\u043e\u0434\u0430 \u0444\u0430\u0439\u043b\u0430 \u043d\u0435\u044f\u0441\u043d\u0430.\n\n\u0414\u0440\u0443\u0433\u0438\u043c \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0430\u0441\u043f\u0435\u043a\u0442\u043e\u043c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0410\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u043b\u043e\u0436\u0438\u043b\u0438 \u043f\u0443\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Sagerunex, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e Lotus Panda. \n\n\u041e\u043d \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0445\u043e\u0441\u0442\u0435, \u0435\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u044b \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e SSH \u0438 \u0434\u0432\u0430 \u0441\u0442\u0438\u043b\u0435\u0440\u0430 ChromeKatz \u0438 CredentialKatz, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0438 \u0444\u0430\u0439\u043b\u044b cookie, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0435\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Google Chrome.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 Zrok, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u043b\u0443\u0436\u0431\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0432\u043d\u0443\u0442\u0440\u0438.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b \u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c datechanger.exe, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u0443\u0442\u0430\u0442\u044c \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u043e\u0432 \u043f\u0440\u0438 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 - \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.", "url": "https://t.me/S_E_Reborn/5571"}, {"timestamp": "2025-04-23T04:52:35Z", "date_only": false, "value": "2025-04-23T04:52:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5849", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "68ce2748-7d73-47b4-a71f-481983f53cd8", "content": "\u200b\u26a1\ufe0fLotus Panda: \u0410\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441? \u0421\u043f\u0430\u0441\u0438\u0431\u043e, \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u043c \u0432\u0438\u0440\u0443\u0441 \u0441 \u043d\u0435\u0433\u043e\n\n\ud83d\udcac \u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Lotus Panda, \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u043c\u0430\u044f \u0441 \u041a\u0438\u0442\u0430\u0435\u043c, \u0432\u043d\u043e\u0432\u044c \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0432 \u0446\u0435\u043d\u0442\u0440\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043e\u0445\u0432\u0430\u0442\u0438\u0432\u0448\u0435\u0439 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438. Symantec \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0441 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2024 \u0433\u043e\u0434\u0430 \u043f\u043e \u0444\u0435\u0432\u0440\u0430\u043b\u044c 2025 \u0433\u043e\u0434\u0430, \u0438 \u0441\u0440\u0435\u0434\u0438 \u0436\u0435\u0440\u0442\u0432 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0432\u043e\u0437\u0434\u0443\u0448\u043d\u044b\u043c \u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0435\u043c, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0438 \u0441\u0442\u0440\u043e\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u043d\u0435 \u043e\u0434\u043d\u0443 \u0441\u0442\u0440\u0430\u043d\u0443 \u0440\u0435\u0433\u0438\u043e\u043d\u0430 \u2014 \u0446\u0435\u043b\u044c\u044e \u0442\u0430\u043a\u0436\u0435 \u0441\u0442\u0430\u043b\u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u043d\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0438 \u043b\u043e\u0433\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432 \u0441\u043e\u0441\u0435\u0434\u043d\u0438\u0445 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0430\u0445.\n\n\u0422\u0435\u043a\u0443\u0449\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0435\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u0438 \u0431\u044b\u043b\u0430 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430. \u0423\u0436\u0435 \u0442\u043e\u0433\u0434\u0430 \u0441\u0442\u0430\u043b\u043e \u044f\u0441\u043d\u043e, \u0447\u0442\u043e \u0440\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u0445\u043e\u0440\u043e\u0448\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0438 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0441 \u0447\u0451\u0442\u043a\u0438\u043c \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c.\n\nLotus Panda (Billbug, Bronze Elgin, Spring Dragon) \u0434\u0430\u0432\u043d\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043d\u0430 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u0440\u043e\u0442\u0438\u0432 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0438 \u0432\u043e\u0435\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u0432 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438. \u041f\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043e\u0446\u0435\u043d\u043a\u0430\u043c, \u0433\u0440\u0443\u043f\u043f\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u0441 2009 \u0433\u043e\u0434\u0430, \u0430 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u043e\u0441\u0432\u0435\u0449\u0430\u043b\u0430\u0441\u044c \u0432 2015 \u0433\u043e\u0434\u0443, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2012-0158 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8) \u0432 Microsoft Office \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 Elise (Trensil), \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0447\u0438\u0442\u0430\u0442\u044c/\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b.\n\n\u041f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Windows OLE CVE-2014-6332 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.3) \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u043f\u0438\u0441\u044c\u043c\u0435 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0443 \u041c\u0418\u0414 \u0424\u0440\u0430\u043d\u0446\u0438\u0438 \u043d\u0430 \u0422\u0430\u0439\u0432\u0430\u043d\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0442\u0440\u043e\u044f\u043d\u0430 Emissary.\n\n\u0421 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0430\u0440\u0441\u0435\u043d\u0430\u043b Lotus Panda \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b\u0441\u044f. \u041d\u043e\u0432\u0430\u044f \u0441\u0435\u0440\u0438\u044f \u0430\u0442\u0430\u043a \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u2014 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u043e\u0432, \u0442\u0440\u043e\u044f\u043d\u043e\u0432 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0444\u0430\u0439\u043b\u044b \u043e\u0442 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 Trend Micro \u0438 Bitdefender, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434 \u0438\u0445 \u0432\u0438\u0434\u043e\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 DLL-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438. \u0411\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u043b\u0438 \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u044d\u0442\u0430\u043f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f, \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u0430\u0445. \u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0436\u0435\u0440\u0442\u0432 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d.\n\n\u0426\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u044b\u043c \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u043c \u0430\u0442\u0430\u043a \u0441\u0442\u0430\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 Sagerunex \u2014 \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0433\u0440\u0443\u043f\u043f\u044b, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u0439 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0441\u0435\u0440\u0432\u0435\u0440. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0438\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0440\u0435\u0432\u0435\u0440\u0441-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043d\u0430 \u0431\u0430\u0437\u0435 SSH, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u0449\u0438\u043a\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043a\u0443\u043a\u0438-\u0444\u0430\u0439\u043b\u043e\u0432 \u0438\u0437 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome \u2014 ChromeKatz \u0438 CredentialKatz.\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0439 \u0434\u0435\u0442\u0430\u043b\u044c\u044e \u0441\u0442\u0430\u043b\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e P2P-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 Zrok, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u043b\u0438 \u0441\u0435\u0431\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c \u0436\u0435\u0440\u0442\u0432, \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044f \u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445. \u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b datechanger.exe, \u0438\u0437\u043c\u0435\u043d\u044f\u044e\u0449\u0435\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u2014 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0434\u043b\u044f \u0443\u0441\u043b\u043e\u0436\u043d\u0435\u043d\u0438\u044f \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0438 \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0441\u043b\u0435\u0434\u043e\u0432 \u0430\u0442\u0430\u043a\u0438.\n\n\u041d\u0430 \u0444\u043e\u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 Lotus Panda \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0432\u043d\u043e\u0432\u044c \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u044e\u0442 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0441\u0438\u0441\u0442\u0435\u043c, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u043e\u0442\u0440\u0430\u0441\u043b\u044f\u0445. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e \u041f\u041e \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u043c\u0438 \u0434\u0435\u043b\u0430\u0435\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0442\u0440\u0443\u0434\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u0445\u043e\u0434\u0430 \u043a \u0437\u0430\u0449\u0438\u0442\u0435.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5849"}, {"timestamp": "2025-08-31T03:00:57Z", "date_only": false, "value": "2025-08-31T03:00:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "f8453a97-23bd-4f70-b1ad-14e06355af10"}, {"timestamp": "2025-08-31T03:12:43Z", "date_only": false, "value": "2025-08-31T03:12:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "f7270884-f2e7-42ad-9c54-a312e876ec43"}, {"timestamp": "2025-10-22T00:05:47.862Z", "date_only": false, "value": "2025-10-22T00:05:47.862Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2012-0158", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:05:47.862Z", "date_only": false, "value": "2025-10-22T00:05:47.862Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2012-0158", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T03:30:30Z", "date_only": false, "value": "2025-10-22T03:30:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XC3W-WQX5-QRF9", "record": "GHSA-XC3W-WQX5-QRF9", "field": "modified"}, {"timestamp": "2026-02-02T12:28:53.761Z", "date_only": false, "value": "2026-02-02T12:28:53.761409Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a87fcd3e-2b49-4304-96b6-a6e174d41da9", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "cbf9e697-da8f-4def-92ed-72179b4fd3e3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a87fcd3e-2b49-4304-96b6-a6e174d41da9"}, {"timestamp": "2026-02-02T12:28:53.761Z", "date_only": false, "value": "2026-02-02T12:28:53.761409Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a87fcd3e-2b49-4304-96b6-a6e174d41da9", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "bbd2f8c5-ee3f-4cd4-9284-9306878c8e7e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a87fcd3e-2b49-4304-96b6-a6e174d41da9"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2012-0158", "field": "timestamps.recorded_at", "uuid": "fbb24e87-fd28-4e85-9627-c88f5ee59398", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-19T07:42:52Z", "date_only": false, "value": "2026-04-19T07:42:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/cb617be5-1f7e-4e1d-aff0-e654c1c75a8c", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "2c7b3add-5065-4c73-bc0d-59da10c2a8c4"}, {"timestamp": "2026-06-04T20:28:00Z", "date_only": false, "value": "2026-06-04T20:28:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/c7244416-f6dc-43cb-934d-67da8c15d123", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "0f92851a-78d1-4a93-9591-4ec6a840def8"}, {"timestamp": "2026-06-16T23:36:48.343Z", "date_only": false, "value": "2026-06-16T23:36:48.343", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2012-0158", "record": "FKIE_CVE-2012-0158", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:51.994Z", "date_only": false, "value": "2026-06-19T12:47:51.994366Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2c13324a-e9bc-4f66-b838-c029587247c8", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "0b191b02-9196-44d9-adac-fa8dbd3ec6dd", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2c13324a-e9bc-4f66-b838-c029587247c8"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2012-0158", "field": "timestamps.recorded_at", "uuid": "3f1e4b32-638e-4f3f-9ea6-9b48b356faea", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:13.311Z", "date_only": false, "value": "2026-06-23T11:13:13.311141Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3f1e4b32-638e-4f3f-9ea6-9b48b356faea", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "914456b1-ef2b-44c2-b532-603a6e8f20fe", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3f1e4b32-638e-4f3f-9ea6-9b48b356faea"}, {"timestamp": "2026-06-23T14:04:35.411Z", "date_only": false, "value": "2026-06-23T14:04:35.411780Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ccb024d-02cf-42a1-859c-b4976e21cef6", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "e0b19ff2-dbad-457e-bef2-23221194cf5f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ccb024d-02cf-42a1-859c-b4976e21cef6"}, {"timestamp": "2026-07-26T07:02:02.728Z", "date_only": false, "value": "2026-07-26T07:02:02.728885Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/4990", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "1de77ce3-425a-428d-bd75-d6e16c3499e9", "url": "https://t.me/KaitNews/4990"}, {"timestamp": "2026-07-26T07:02:19.406Z", "date_only": false, "value": "2026-07-26T07:02:19.406601Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/602", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "f3a818a2-1fb8-48a9-9596-8904bf2a24f3", "url": "https://t.me/KaitNews/602"}, {"timestamp": "2026-07-27T00:01:43.111Z", "date_only": false, "value": "2026-07-27T00:01:43.111694Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/4990", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "4a4c4ef3-08d8-44b3-801c-0d7b21f7ea90", "url": "https://t.me/KaitNews/4990"}, {"timestamp": "2026-07-27T00:01:56.135Z", "date_only": false, "value": "2026-07-27T00:01:56.135484Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/602", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "7ae84268-8942-4058-9df5-a54ad9d22925", "url": "https://t.me/KaitNews/602"}, {"timestamp": "2026-08-04T10:00:05.874Z", "date_only": false, "value": "2026-08-04T10:00:05.874580Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KaitNews/4990", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "151bb319-278b-4ccf-bf16-05da45c12fb5", "url": "https://t.me/KaitNews/4990"}, {"timestamp": "2026-08-05T00:00:49.506Z", "date_only": false, "value": "2026-08-05T00:00:49.506712Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KaitNews/4990", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "56954827-fb73-40d1-bb57-0f9ea4ee98f7", "url": "https://t.me/KaitNews/4990"}, {"timestamp": "2026-08-06T00:00:05.149Z", "date_only": false, "value": "2026-08-06T00:00:05.149459Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/602", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "935b80d3-0904-4fad-ae9c-5cfbf2285c42", "url": "https://t.me/KaitNews/602"}, {"timestamp": "2026-08-29T23:00:05.671Z", "date_only": false, "value": "2026-08-29T23:00:05.671007Z", "kind": "sighting", "label": "Seen", "source": "Telegram/pQB4kDvOmUO0-FOWPosgcezK6szsfsV4tQ7NQqEDCAFgSWg", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "1aa41147-7def-46f5-ba02-d8cf01a4ac7b"}, {"timestamp": "2026-08-30T00:00:07.508Z", "date_only": false, "value": "2026-08-30T00:00:07.508014Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/pQB4kDvOmUO0-FOWPosgcezK6szsfsV4tQ7NQqEDCAFgSWg", "record": "CVE-2012-0158", "field": "creation_timestamp", "uuid": "31f5e465-de2c-4d10-9c98-12415d30bcf1"}]}