PowerPool
Also reported as IAmTheKing. Linked to Russia by one source.
Reports per quarter
CVEs named in reports
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
IAmTheKing and the SlothfulMedia malware family
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor IAmTheKing and the SlothfulMedia malware family
-
Group-IB_Hi-Tech_Crime_Trends_2019-2020_en
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Group-IB_Hi-Tech_Crime_Trends_2019-2020_en
-
Group-IB_Hi-Tech_Crime_Trends_2019-2020
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Group-IB_Hi-Tech_Crime_Trends_2019-2020
-
Windows Task Scheduler Zero Day Exploited by Malware
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Windows Task Scheduler Zero Day Exploited by Malware
-
PowerPool malware exploits ALPC LPE zero‑day vulnerability
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor PowerPool malware exploits ALPC LPE zero‑day vulnerability
-
EPRI - ICCP Protocol - Threats to Data Security and Potential Solutions.pdf
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor EPRI - ICCP Protocol - Threats to Data Security and Potential Solutions.pdf
Newest first. Details opens the report in Explore.