Kudos to @AssafKachlon and @mediant_here from @morphisec on identifying more privilege escalation CVEs in McAfee DLP product while waiting patiently for a patch. Morphisec is committed to making the cyber world a safer place for everyone. https://t.co/gXJSPmuYvM
Cobalt IOCs
NOT LIVE
hxxp://195.123.233[.]245:80/svchst
hxxp://195.149.87[.]136:80/a136
hxxp://38.121.42[.]202:80/a
hxxps://www.gjdfjgoa[.]com/zmq1234/https/https-x64-staged.ps1