CVE-2023-20598Vulnerability
Reported by 2 independent sources · first reported by The Hacker News · last reported
Last reported 17 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
CERT-UA: Fake Cloudflare Checks Deliver LunexStealer Malware“… slip past Windows User Account Control, carving out Microsoft Defender exceptions, and deploying a vulnerable AMD driver to exploit CVE-2023-20598, a bring-your-own-vulnerable-driver (BYOVD) move that blinds security tools before the real payload drops.”
-
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials“Lunex takes advantage of a vulnerable kernel-mode driver for AMD Radeon Software ("PDFWKRNL.sys"), which is susceptible to CVE-2023-20598, to escalate privileges and blind security-related processes while keeping them running.”
Indicators reported together
named in the same reports- 193.178.159[.]128in 1 report
- account-sams-club[.]comin 1 report
- teamwork-recover-password[.]comin 1 report
- namshi-uae[.]comin 1 report
- whatsappbusineses[.]comin 1 report
- ibraq-perfumes[.]comin 1 report
Copy these 6 indicators · defanged
Thanks — we review every report.