CVE-2020-1472

Reported Context (2)

CVE-2020-1472 exploitation Leak Reveals Russian Institute’s Apparent SVR-Linked Cyber Development Ecosystem
They then used a custom tool that used the Zerologon (CVE-2020-1472) vulnerability to attempt additional lateral movement to a second domain controller. Lunar Spider Intrusion Used Tax-Themed JavaScript to Maintain Access for Nearly Two Months

Malware (4)

People (2)

Threat Actors (1)

MITRE ATT&CK (43)

Vendors (2)

Products (6)

Tools (24)

Industries (1)

Countries (9)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.