{"uuid": "e885d232-1dcd-46a2-bb9f-bed6eb51aabf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26411", "type": "seen", "source": "https://t.me/hacking_Attack/16766", "content": "eys to encrypt the exploits, researchers wrote. This info\u2014which included screen resolution, timezone, languages, browser plugins, and available MIME types\u2014would then be sent back to the exploit server and used by attackers to decide whether or not an exploit should be delivered to the target, they said.\n\nResearchers also identified a separate campaigned in April that also targeted Armenian users by leveraging CVE-2021-26411, an RCE bug found in Internet Explorer (IE). The campaign loaded web content within IE that contained malicious Office documents, researchers wrote.\n\n\u201cThis happened by either embedding a remote ActiveX object using a Shell.Explorer.1 OLE object or by spawning an Internet Explorer process via VBA macros to navigate to a web page,\u201d Stone and Lecigne explained.\n\nAt the time, researchers said they were unable to recover the next-stage payload, but successfully recovered the exploit after discovering an early June campaign from the same actors. Microsoft patched the flaw later that month, they said. See Also: Offensive Security Tool: It Was All A Dream (Windows Print Spooler RCE) Why There is an Increase in Zero-Days?All in all, security researchers have identified 33 zero-day flaws\u00a0so far in 2021, which is 11 more than the total number from 2020, according to the post.\n\nWhile that trend reflects an increase in the number of these types of vulnerabilities that exist, Google researchers \u201cbelieve greater detection and disclosure efforts are also contributing to the upward trend,\u201d they wrote.\n\nStill, it\u2019s highly possible that attackers are indeed using more zero-day exploits\u00a0for a few reasons, researchers noted. One is that the increase and maturation of security technologies and features means attackers also have to level up, which in turn requires more zero-day vulnerabilities\u00a0for functional attack chains, they said. See Also: Hacking Stories: Andrian Lamo \u2013 The \u2018homeless\u2019 Hacker The growth of mobile platforms also has resulted in an increase in the number of products that threat actors want to target\u2014hence more reason to use zero-day exploits, researchers observed. Perhaps inspired by this increase in demand, commercial vendors also are selling more access to zero-days than in the early 2010s, they said.\n\nFinally, the maturation of security protections and strategies also inspires sophistication on the part of attackers as well, boosting the need for them to use zero-day flaws to convince victims to install malware, researchers noted.\n\n\u201cDue to advancements in security, these actors now more often have to use 0-day exploits to accomplish their goals,\u201d Stone and Lecigne wrote.\nSource: threatpost.com (Click Link)Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Windows-Hello-e1626260072511-90x90.jpg Windows Hello Bypass Fools Biometrics Safeguards in PCs1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/ICS-90x90.jpg Unpatched Critical RCE Bug Allows Industrial, Utility Takeovers2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/patching-against-ransomware-100723134-large-90x90.jpg Kaseya Patches Zero-Days Used in REvil Attacks3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/cisco-90x90.jpg Cisco BPA, WSA Bugs Allow Remote Cyberattacks4 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/Untitled-design-8-90x90.png Coursera Flunks API Security Test in Researchers\u2019 Exam1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/macos-trojan-90x90.jpg MacOS Targeted in WildPressure APT Malware Campaign1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/i339637-90x90.jpg Western Digital Users Face Another RCE1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/07/shutterstock_1968890518[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:33.182967Z"}