{"uuid": "431f623f-4e2e-4688-9633-fa5489d91c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-21412", "type": "exploited", "source": "https://t.me/cibsecurity/78258", "content": "\ud83e\udd85 Increase in the exploitation of Microsoft SmartScreen vulnerability CVE-2024-21412 \ud83e\udd85\n\n  Key Takeaways\u00a0    Cyble Research and Intelligence Labs CRIL recently came across an active campaign exploiting the Microsoft SmartScreen vulnerability CVE202421412.\u00a0\u00a0     The ongoing campaign targets multiple regions, including Spain, the US, and Australia.\u00a0     It employs lures related to healthcare insurance schemes, transportation notices, and taxrelated communications to deceive individuals and organizations into downloading malicious payloads onto their machines.\u00a0     The infection starts with a spam email containing a link that redirects users to a WebDAV share using a search protocol, deceiving them into executing a malicious internet shortcut file, exploiting CVE202421412.\u00a0     The threat actors TAs conducted a multistage attack utilizing legitimate tools such as forfiles.exe,...\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"CYBLE\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2024-07-05T16:49:36.000000Z"}