Google discovered North Korea exploiting an Internet Explorer zero-day vulnerability in October
. However, as their technical analysis explains, Office is still using the IE engine to execute the JavaScript that enables the attack, which is why it worked on Windows 7 through 11 and Windows Server 2008 through 2022 machines that haven’t installed new November 2022 security updates.
TAG became aware of the vulnerability when the malicious Microsoft Office documents titled “221031 Seoul Yongsan Itaewon accident response situation .docx” were uploaded to VirusTotal on October 31, 2022. The documents took advantage of widespread publicity over the tragedy in Itaewon on October 29th, in which 151 people lost their lives in a crowd crush during a Halloween celebration in Seoul.
The attack is believed to be the work of a group of North Korean government-backed actors known as APT37 The document exploited an Internet Explorer 0-day vulnerability found within “jscript9.dll”, the JavaScript engine of Internet Explorer, which could be used to deliver malware or malicious code when rendering a website controlled by the attacker.
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
North Korea fires more artillery shells into sea in response to South Korea drills -KCNANorth Korea said on Tuesday it had ordered military units to fire more artillery shells into the sea, the North's official KCNA news agency reported, in response to South Korea's ongoing drills across the border.
Read more »
North Korea fires more artillery shells into sea in response to South Korea drillsThe firing comes a day after Pyongyang said it fired more than 130 shells into the sea off its east and west coasts, some of which landed in a buffer zone near the sea border between the two Koreas.
Read more »
North Korea executes teenagers for distributing South Korean TV, movies: reportKorean media, citing witnesses, reports that North Korean authorities executed two teens for the crime of watching and distributing South Korean movies.
Read more »
North Korea reportedly fires 130 artillery rounds, violating inter-Korean agreementNorth Korea allegedly fired more than 100 artillery rounds into the sea off both its coasts on Monday morning, violating a 2018 agreement.
Read more »
2023 Ford SUVs: What’s New For the Bronco, Explorer, Escape, and MoreThis model year, Ford has retro special editions, an updated compact, and an improved electric SUV.
Read more »