Operation WizardOpium

Reports per quarter

CVEs named in reports

• CVE-2010-2744
• CVE-2016-7255 KEV ransomware
• CVE-2017-11882 KEV ransomware
• CVE-2017-8570 KEV
• CVE-2018-8174 KEV ransomware
• CVE-2018-8373 KEV
• CVE-2018-8653 KEV
• CVE-2019-0676 KEV
• CVE-2019-0859 KEV ransomware
• CVE-2019-1367 KEV ransomware
• CVE-2019-13720 KEV
• CVE-2019-1429 KEV

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

1. 12 August 2020

   Internet Explorer and Windows zero-day exploits used in Operation PowerFall

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Internet Explorer and Windows zero-day exploits used in Operation PowerFall

2. 12 August 2020

   Internet Explorer and Windows zero-day exploits used in Operation PowerFall _ Securelist

   date in the CCS '25 data Kaspersky fromORKLCCS '25 data

   The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Internet Explorer and Windows zero-day exploits used in Operation PowerFall _ Securelist

3. 12 August 2020

   Internet Explorer and Windows zero-day exploits used in Operation PowerFall

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor Internet Explorer and Windows zero-day exploits used in Operation PowerFall

4. 14 June 2020

   Deep-dive- The DarkHotel APT

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Deep-dive- The DarkHotel APT

5. 14 June 2020

   Deep-dive: The DarkHotel APT

   Malpedia library date Bushido Token fromORKLCCS '25 data

   Archived copy on ORKL Detailsfor Deep-dive: The DarkHotel APT

6. 28 May 2020

   The zero-day exploits of Operation WizardOpium

   Malpedia library date fromORKL

   Archived copy on ORKL Detailsfor The zero-day exploits of Operation WizardOpium

7. 28 May 2020

   The zero-day exploits of Operation WizardOpium _ Securelist

   date in the CCS '25 data Kaspersky fromORKLCCS '25 data

   The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor The zero-day exploits of Operation WizardOpium _ Securelist

8. 28 May 2020

   The zero-day exploits of Operation WizardOpium

   date in the title fromORKL

   The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor The zero-day exploits of Operation WizardOpium

9. 11 December 2019

   Chrome 0-day exploit CVE-2019-13720 used in Operation WizardOpium

   date in the CCS '25 data Kaspersky fromORKLCCS '25 data

   The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Chrome 0-day exploit CVE-2019-13720 used in Operation WizardOpium

10. 10 December 2019

    Windows 0-day exploit CVE-2019-1458 used in Operation WizardOpium

    date in the title fromORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Windows 0-day exploit CVE-2019-1458 used in Operation WizardOpium

Newest first. Details opens the report in Explore.