{"metadata": {"vulnerability": "cve-2024-4978", "count": 49, "kinds": {"milestone": 4, "sighting": 22, "kev": 11, "other": 12}}, "data": [{"timestamp": "2024-05-15T21:03:53.551Z", "date_only": false, "value": "2024-05-15T21:03:53.551Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-4978", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-05-23T00:30:00Z", "date_only": false, "value": "2024-05-23T00:30:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cisa-cg", "record": "cve-2024-4978", "field": "containers.cna.datePublic"}, {"timestamp": "2024-05-23T01:56:37.946Z", "date_only": false, "value": "2024-05-23T01:56:37.946Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-4978", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-05-23T02:15:09Z", "date_only": false, "value": "2024-05-23T02:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WF54-F8V9-V72V", "record": "GHSA-WF54-F8V9-V72V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-05-23T02:15:09.257Z", "date_only": false, "value": "2024-05-23T02:15:09.257", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4978", "record": "FKIE_CVE-2024-4978", "field": "published"}, {"timestamp": "2024-05-23T03:30:41Z", "date_only": false, "value": "2024-05-23T03:30:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WF54-F8V9-V72V", "record": "GHSA-WF54-F8V9-V72V", "field": "published"}, {"timestamp": "2024-05-23T19:33:17Z", "date_only": false, "value": "2024-05-23T19:33:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackingInsights/867", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "403e53a4-b7a5-492b-9c78-97ded3e81d06", "content": "\u200aCVE-2024-4978: Backdoor Discovered in Justice AV Solutions Courtroom Software\n\nhttps://securityonline.info/cve-2024-4978-backdoor-discovered-in-justice-av-solutions-courtroom-software/", "url": "https://t.me/HackingInsights/867"}, {"timestamp": "2024-05-24T12:21:47Z", "date_only": false, "value": "2024-05-24T12:21:47.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/35Z3j61Eiun51LjyBaXAW69rvddYyTcdJWUO-G1bZQXEY34", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "58c95b82-be94-4bd9-b6c8-1f084ffc8ddf"}, {"timestamp": "2024-05-24T13:34:06Z", "date_only": false, "value": "2024-05-24T13:34:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/1997", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "5f9a4b6e-5e88-46ed-a299-cdd373e111e3", "content": "Courtroom Software Backdoored to Deliver RustDoor Malware in Supply Chain Attack\nhttps://thehackernews.com/2024/05/courtroom-software-backdoored-to.html\n\nMalicious actors have backdoored the installer associated with courtroom video recording software developed by Justice AV Solutions (JAVS) to deliver malware that's associated with a known backdoor called RustDoor.\nThe software supply chain attack, tracked as\u00a0CVE-2024-4978, impacts JAVS Viewer v8.3.7, a component of the\u00a0JAVS Suite 8\u00a0that allows users to create, manage, publish,", "url": "https://t.me/KomunitiSiber/1997"}, {"timestamp": "2024-05-24T14:30:05Z", "date_only": false, "value": "2024-05-24T14:30:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/5775", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "8931a6d4-468b-4a9e-9dc7-7081f4f4e7cf", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 Rapid7 \u0438 S2W \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0442\u0440\u043e\u044f\u043d-\u0431\u044d\u043a\u0434\u043e\u0440 GateDoor \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Justice AV Solutions (JAVS) \u0434\u043b\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0437\u0430\u0441\u0435\u0434\u0430\u043d\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0432 \u0441\u0443\u0434\u0435\u0431\u043d\u044b\u0445, \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438 \u044e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f\u0445 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a, \u0432\u043d\u0435\u0434\u0440\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a JAVS Viewer \u0432\u0435\u0440\u0441\u0438\u0438 8.3.7, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 10 000 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a.\n\n\u041c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0430 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0432 \u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0434\u0432\u043e\u0438\u0447\u043d\u043e\u0433\u043e fffmpeg.exe, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0430 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 \u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0438\u043c \u0434\u043e \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u044b \u043c\u0430\u044f.\n\n\u0420\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0432\u0448\u0430\u044f \u044d\u0442\u043e\u0442 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a (\u0442\u0435\u043f\u0435\u0440\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2024-4978) Rapid7 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e S2W Talon \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430\u00a0 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a JAVS \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u043f\u0440\u0435\u043b\u044f \u0438 \u0441\u0432\u044f\u0437\u0430\u043b\u0430 \u0435\u0433\u043e \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e Rustdoor/GateDoor.\n\n\u041d\u0430\u0439\u0434\u0435\u043d\u043d\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0430 \u043d\u0430 Go \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u044e RustDoor \u0434\u043b\u044f Windows, \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Rust, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0440\u0430\u0436\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b macOS.\n\n\u041f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u043e\u0442\u0447\u0435\u0442\u044b Bitdefender \u0438 S2W \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u043b\u0438 \u043e\u0431\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u043d\u0435\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0430 \u0441\u043e\u0441\u043a\u0430\u043c\u0438\u0432\u0448\u0430\u044f\u0441\u044f \u0431\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 AlphV (BlackCat).\n\n\u0410\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 CVE-2024-4978, \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0438\u0439 10 \u043c\u0430\u044f, Rapid7 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043d\u0430 \u0441\u0432\u043e\u0439 C2 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430.\n\n\u0417\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0434\u0432\u0430 \u0437\u0430\u043f\u0443\u0442\u0430\u043d\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f PowerShell \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0434\u043b\u044f Windows (ETW) \u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c AMSI.\n\n\u0417\u0430\u0442\u0435\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 C2 \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0435\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 Python, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nRapid7 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0443\u0438\u044f\u043c\u0438 \u043f\u043e \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u0433\u0440\u043e\u0437\u044b, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f JAVS Viewer, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u0443\u044e \u043f\u0435\u0440\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0438 \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u0441\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Justice AV Solutions, \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u0443\u0434\u0430\u043b\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a \u0441\u043e \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442 \u0430\u0443\u0434\u0438\u0442 \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 JAVS.\n\n\u041f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u043b\u043e\u043a\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d, \u043d\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u044b\u0442\u0430\u044e\u0442\u0441\u044f \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u044c, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0444\u0430\u0439\u043b \u0441 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u043c.", "url": "https://t.me/true_secator/5775"}, {"timestamp": "2024-05-24T15:11:43Z", "date_only": false, "value": "2024-05-24T15:11:43.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/e2_lMGXoR52HR_uziJWnU-rY5ZQloyS2KwiQp-7lFElkzA", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "b1932276-0991-4086-86ec-2efe90d40731"}, {"timestamp": "2024-05-24T15:51:10Z", "date_only": false, "value": "2024-05-24T15:51:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tengkorakcybercrewz/1591", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "4a2fec0a-5d63-41c9-9ec0-a4a520ff0643", "content": "The Hacker News\nCourtroom Software Backdoored to Deliver RustDoor Malware in Supply Chain Attack\n\nMalicious actors have backdoored the installer associated with courtroom video recording software developed by Justice AV Solutions (JAVS) to deliver malware that's associated with a known backdoor called RustDoor.\nThe software supply chain attack, tracked as CVE-2024-4978, impacts JAVS Viewer v8.3.7, a component of the JAVS Suite 8 that allows users to create, manage, publish,", "url": "https://t.me/tengkorakcybercrewz/1591"}, {"timestamp": "2024-05-24T15:51:10Z", "date_only": false, "value": "2024-05-24T15:51:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tengkorakcybercrewz/8511", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "2c3636b3-3847-45da-8f42-f02e9fdf40ae", "content": "The Hacker News\nCourtroom Software Backdoored to Deliver RustDoor Malware in Supply Chain Attack\n\nMalicious actors have backdoored the installer associated with courtroom video recording software developed by Justice AV Solutions (JAVS) to deliver malware that's associated with a known backdoor called RustDoor.\nThe software supply chain attack, tracked as CVE-2024-4978, impacts JAVS Viewer v8.3.7, a component of the JAVS Suite 8 that allows users to create, manage, publish,", "url": "https://t.me/tengkorakcybercrewz/8511"}, {"timestamp": "2024-05-24T15:51:10Z", "date_only": false, "value": "2024-05-24T15:51:10.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/-tGEIWKVXNdVywjQTeX1GXx5xcpWZXvGoTZqttWYETWNuA", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "09657931-fe0d-49c6-a780-4e0be2bb4ae0"}, {"timestamp": "2024-05-27T12:48:37Z", "date_only": false, "value": "2024-05-27T12:48:37.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f3e1d35b-bb2e-45f5-bf93-1058bd700092", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "e107a121-bdb2-4ffb-8ecd-0e51fb1fc89a"}, {"timestamp": "2024-05-28T13:49:47Z", "date_only": false, "value": "2024-05-28T13:49:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/10578", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "f17caa11-caa3-4d8b-b13e-54414f0d7522", "content": "#Threat_Research\n1. Old new email attacks\nhttps://blog.slonser.info/posts/email-attacks\n2. Backdoored Justice AV Solutions Viewer Software Used in Apparent Supply Chain Attack (CVE-2024-4978)\nhttps://www.rapid7.com/blog/post/2024/05/23/cve-2024-4978-backdoored-justice-av-solutions-viewer-software-used-in-apparent-supply-chain-attack", "url": "https://t.me/CyberSecurityTechnologies/10578"}, {"timestamp": "2024-05-29T00:00:00Z", "date_only": false, "value": "2024-05-29T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-4978", "field": "timestamps.asserted_at", "uuid": "25ab1317-3f72-419c-87c3-d94010c5ce48", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-29T00:00:00Z", "date_only": false, "value": "2024-05-29T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-4978", "field": "timestamps.asserted_at", "uuid": "38122147-9963-4930-8540-d32bd78f50a0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-29T00:00:00Z", "date_only": true, "value": "2024-05-29", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-4978", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2024-05-29T00:00:00Z", "date_only": false, "value": "2024-05-29T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-4978", "field": "evidence.0.details.added_date", "uuid": "38122147-9963-4930-8540-d32bd78f50a0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-29T00:00:00Z", "date_only": true, "value": "2024-05-29", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-4978", "field": "evidence.0.details.date_added", "uuid": "25ab1317-3f72-419c-87c3-d94010c5ce48", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-29T00:00:00Z", "date_only": false, "value": "2024-05-29T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-4978", "field": "timestamps.first_seen_at", "uuid": "25ab1317-3f72-419c-87c3-d94010c5ce48", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-29T00:00:00Z", "date_only": false, "value": "2024-05-29T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-4978", "field": "timestamps.first_seen_at", "uuid": "38122147-9963-4930-8540-d32bd78f50a0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-29T00:00:00Z", "date_only": false, "value": "2024-05-29T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-4978", "field": "status.status_updated_at", "uuid": "25ab1317-3f72-419c-87c3-d94010c5ce48", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-29T00:00:00Z", "date_only": false, "value": "2024-05-29T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-4978", "field": "status.status_updated_at", "uuid": "38122147-9963-4930-8540-d32bd78f50a0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-05-29T00:00:00Z", "date_only": false, "value": "2024-05-29T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-4978", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2024-05-29T17:11:59.027Z", "date_only": false, "value": "2024-05-29T17:11:59.027Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cisa-cg", "record": "cve-2024-4978", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-05-29T18:10:02Z", "date_only": false, "value": "2024-05-29T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "17236c6a-be8f-4fe9-a46f-444b4c17161e"}, {"timestamp": "2024-05-30T11:12:54.307Z", "date_only": false, "value": "2024-05-30T11:12:54.307588Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-4978", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-05-30T11:12:54.307Z", "date_only": false, "value": "2024-05-30T11:12:54.307588Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4978", "record": "FKIE_CVE-2024-4978", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-19T00:00:00Z", "date_only": true, "value": "2024-06-19", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-4978", "field": "evidence.0.details.due_date", "uuid": "25ab1317-3f72-419c-87c3-d94010c5ce48", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-01T20:55:10.367Z", "date_only": false, "value": "2024-08-01T20:55:10.367Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-4978", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-08T23:21:26Z", "date_only": false, "value": "2025-02-08T23:21:26.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/DarkWebInformer_CVEAlerts/3900", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "e88cae13-44a2-47d1-826b-4270879b2d2b", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-4978\n\ud83c\udfe2 Vendor: Justice AV Solutions\n\ud83d\udda5\ufe0f Product: Viewer \n\ud83d\udd39 Description: Justice AV Solutions (JAVS) Viewer installer contains a malicious version of ffmpeg.exe, named fffmpeg.exe (SHA256: 421a4ad2615941b177b6ec4ab5e239c14e62af2ab07c6df1741e2a62223223c4). When run, this creates a backdoor connection to a malicious C2 server.\n\ud83d\udccf Published: 2024-05-23T00:00:00Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json\n2. https://www.rapid7.com/blog/post/2024/05/23/cve-2024-4978-backdoored-justice-av-solutions-viewer-software-used-in-apparent-supply-chain-attack/", "url": "https://t.me/DarkWebInformer_CVEAlerts/3900"}, {"timestamp": "2025-02-23T02:10:55Z", "date_only": false, "value": "2025-02-23T02:10:55.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "563f766e-d37e-48be-b1fd-93807f0b2f15"}, {"timestamp": "2025-08-31T03:01:25Z", "date_only": false, "value": "2025-08-31T03:01:25.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "74260c74-476f-4c6e-a300-469eb1443fc2"}, {"timestamp": "2025-10-21T23:05:17.733Z", "date_only": false, "value": "2025-10-21T23:05:17.733Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-4978", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:17.733Z", "date_only": false, "value": "2025-10-21T23:05:17.733Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-4978", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:02Z", "date_only": false, "value": "2025-10-22T00:33:02Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WF54-F8V9-V72V", "record": "GHSA-WF54-F8V9-V72V", "field": "modified"}, {"timestamp": "2026-02-02T12:26:36.167Z", "date_only": false, "value": "2026-02-02T12:26:36.167197Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d176767-103d-4f9e-b482-d765fea24103", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "21c0ed52-306e-43b1-b602-342b7c330778", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d176767-103d-4f9e-b482-d765fea24103"}, {"timestamp": "2026-02-02T12:26:36.167Z", "date_only": false, "value": "2026-02-02T12:26:36.167197Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d176767-103d-4f9e-b482-d765fea24103", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "89cf142a-dc98-4826-b76c-55f183e23f90", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d176767-103d-4f9e-b482-d765fea24103"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-4978", "field": "timestamps.recorded_at", "uuid": "25ab1317-3f72-419c-87c3-d94010c5ce48", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T08:03:19.347Z", "date_only": false, "value": "2026-06-17T08:03:19.347", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-4978", "record": "FKIE_CVE-2024-4978", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:39.546Z", "date_only": false, "value": "2026-06-19T12:46:39.546266Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/232bb103-eedb-43b8-8b76-597b2855912d", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "f43a7913-8c8d-4972-867c-519ed0ff32db", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/232bb103-eedb-43b8-8b76-597b2855912d"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-4978", "field": "timestamps.recorded_at", "uuid": "38122147-9963-4930-8540-d32bd78f50a0", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:21.770Z", "date_only": false, "value": "2026-06-23T11:14:21.770065Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/38122147-9963-4930-8540-d32bd78f50a0", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "8fe5e135-ac58-4b2e-8534-e0789489a196", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/38122147-9963-4930-8540-d32bd78f50a0"}, {"timestamp": "2026-06-23T14:05:53.966Z", "date_only": false, "value": "2026-06-23T14:05:53.966498Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/acc019bb-2ecd-46bf-9064-da56fa3e5f74", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "1b452e2d-a3f0-4a2f-8dea-d85e01de9807", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/acc019bb-2ecd-46bf-9064-da56fa3e5f74"}, {"timestamp": "2026-07-26T02:02:09.353Z", "date_only": false, "value": "2026-07-26T02:02:09.353996Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2798", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "af1c7692-bda3-4878-9018-c5e9c9f3e433", "url": "https://t.me/EchelonEyes/2798"}, {"timestamp": "2026-07-27T00:00:47.639Z", "date_only": false, "value": "2026-07-27T00:00:47.639912Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2798", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "f8089dcb-6035-4ec1-b166-c845a9f4b4d1", "url": "https://t.me/EchelonEyes/2798"}, {"timestamp": "2026-07-28T00:00:40.868Z", "date_only": false, "value": "2026-07-28T00:00:40.868155Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/2798", "record": "CVE-2024-4978", "field": "creation_timestamp", "uuid": "d9488d31-1fe5-4bf3-bed1-a9625595c459", "url": "https://t.me/EchelonEyes/2798"}]}