Novel tool leveraged by APT28 to exploit old Windows vulnerability

Data exfiltration and privilege escalation attacks leveraging the novel GooseEgg hacking tool to exploit an already addressed Windows Print Spooler flaw, tracked as CVE-2022-38028, have been deployed by Russian cyberespionage operation APT28, also known as Forest Blizzard, against government, education, transportation, and non-government organizations since April 2019, BleepingComputer reports.

Article Link: Novel tool leveraged by APT28 to exploit old Windows vulnerability | SC Media

1 post - 1 participant

Read full topic

april apt28 article attacks bleepingcomputer blizzard cve cyberespionage data data exfiltration education escalation exfiltration exploit flaw forest forest blizzard gooseegg government hacking hacking tool non novel old organizations print print spooler privilege privilege escalation reports russian tool transportation vulnerability windows windows print spooler windows vulnerability