Nicolo

[TrendAI™ Research @trendai_RSRCH]

1/7

The #malware #Negasteal consistently adapts and uses known vulnerabilities to avoid detection during the deployment of its payload.

Although it has used CVE-2017-11882 in the past, we recently observed it concurrently utilizing CVE-2017-0199 and CVE-2017-11882.

[Max_Malyutin @Max_Mal_]

@Unit42_Intel @executemalware @Unit42_Intel and @malware_traffic - Thank you for sharing this info!