Operation ShadowHammer
Reports per quarter
CVEs named in reports
- CVE-2008-3431 KEV
- CVE-2015-2545 KEV
- CVE-2016-5195 KEV
- CVE-2017-0199 KEV ransomware
- CVE-2017-10271 KEV ransomware
- CVE-2017-11882 KEV ransomware
- CVE-2017-8570 KEV
- CVE-2018-0802 KEV ransomware
- CVE-2018-4878 KEV ransomware
- CVE-2018-5407
- CVE-2019-0797 KEV
- CVE-2019-10149 KEV
Show all 14 CVEs Show fewer
- CVE-2019-3396 KEV ransomware
- CVE-2020-0688 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
APT 41 - Threat Group Cards: A Threat Actor Encyclopedia
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor APT 41 - Threat Group Cards: A Threat Actor Encyclopedia
-
The original link failed its last check. Original publisher Detailsfor Презентация PowerPoint
Show all 28 reports Show fewer
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor ESET_Winnti
-
2019 Cyber Threatscape Report I Accenture
The original link failed its last check. Original publisher Detailsfor 2019 Cyber Threatscape Report I Accenture
-
TeamViewer Confirms Undisclosed Breach From 2016
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor TeamViewer Confirms Undisclosed Breach From 2016
-
APT_trends_report_Q1_2019_Securelist
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor APT_trends_report_Q1_2019_Securelist
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Operation ShadowHammer
-
Operation ShadowHammer- a high-profile supply chain attack
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Operation ShadowHammer- a high-profile supply chain attack
-
Let's Learn- Dissecting Operation ShadowHammer Shellcode Internals in crt_ExitProcess
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Let's Learn- Dissecting Operation ShadowHammer Shellcode Internals in crt_ExitProcess
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Forging the ShadowHammer
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Operation ShadowHammer
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Operation ShadowHammer
Newest first. Details opens the report in Explore.