Product
ManageEngine ServiceDesk
- First Reported
- Aug 24, 2023
- Latest Reported
- Aug 24, 2023
Reported Context (2)
- In the Lazarus Group’s latest campaign, which we detailed in a recent blog, the North Korean state-sponsored actor is exploiting CVE-2022-47966, a ManageEngine ServiceDesk vulnerability to deploy multiple threats. Lazarus Group Uses CollectionRAT and DeimosC2 in Enterprise Campaign
- In this campaign, the attackers began exploiting a ManageEngine ServiceDesk vulnerability (CVE-2022-47966) five days after PoCs for the exploit were publicly disclosed to deliver and deploy a newer malware threat we Lazarus Uses ManageEngine Flaw to Deploy QuiteRAT in European Infrastructure Breach
CVE (1)
Malware (9)
People (3)
Threat Actors (2)
MITRE ATT&CK (9)
Vendors (3)
Products (21)
Tools (8)
Industries (3)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.