{"uuid": "1a368b73-d276-492a-a31f-4ab710265013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35368", "type": "seen", "source": "https://t.me/cissp/3707", "content": "Threat Research\n1. Global Phishing Campaign Targets Energy Sector and its Suppliers\ud83d\ude04\nhttps://www.intezer.com/blog/research/global-phishing-campaign-targets-energy-sector-and-its-suppliers\n2. Tracking Cobalt Strike: A Trend Micro Vision One Investigation\ud83d\udc4d\ud83c\udffd\nhttps://www.trendmicro.com/en_us/research/21/g/tracking_cobalt_strike_a_vision_one_investigation.html\n\nRed Team Tactics\n1. Code Injection, Inject malicious payload via pagetables pml4\ud83d\ude04\nhttps://github.com/kkent030315/PageTableInjection\n2. VBA Stomping - Advanced Maldoc Techniques\nhttps://medium.com/walmartglobaltech/vba-stomping-advanced-maldoc-techniques-612c484ab278\n\nCode Property Graph (CPG) frontend for binary applications and libraries\nhttps://github.com/joernio/ghidra2cpg\n\nMalware analysis\nHackers Use New Trick to Disable Macro Security Warnings in Malicious Office Files\ud83d\ude0e\nhttps://thehackernews.com/2021/07/hackers-use-new-trick-to-disable-macro.html?m=1\n\nCVE-2021-35368:\nCRS Request Body Bypass\nhttps://coreruleset.org/20210630/cve-2021-35368-crs-request-body-bypass", "creation_timestamp": "2026-09-01T17:00:46.239184Z"}