cognitive cybersecurity intelligence

News and Analysis

Search

Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails

A Windows NT LAN Manager (NTLM) security flaw was exploited by Russia-linked cybercriminals targeting Ukraine. The flaw, CVE-2024-43451, allows users’ NTLMv2 hash information to be stolen and was fixed by Microsoft recently. Israel’s ClearSky identified the flaw’s abuse to deliver the Spark RAT malware via hacking of an official Ukrainian government site where users download academic certificates. The Ukraine Computer Emergency Response Team linked this to a likely Russian threat, UAC-0194.

Source: thehackernews.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts