{"id":9980,"date":"2019-03-17T22:24:14","date_gmt":"2019-03-17T19:24:14","guid":{"rendered":"https:\/\/saudishopper.com.sa\/en\/?p=9980"},"modified":"2026-03-27T17:54:21","modified_gmt":"2026-03-27T14:54:21","slug":"kaspersky-lab-uncovers-windows-zero-day-exploited-by-recently-discovered-threat-actor","status":"publish","type":"post","link":"https:\/\/saudishopper.com.sa\/en\/kaspersky-lab-uncovers-windows-zero-day-exploited-by-recently-discovered-threat-actor\/","title":{"rendered":"Kaspersky Lab uncovers Windows zero-day exploited by recently discovered threat actor"},"content":{"rendered":"

Kaspersky Lab\u2019s automatedtechnologies have detected anew exploited vulnerability in Microsoft Windows, believed to have been used in targeted attacks by at least two threat actors, including the recently discovered SandCat. This is the fourth zero-day exploit to be discovered in the wild by Kaspersky Lab\u2019sAutomatic Exploit Prevention technology. <\/strong>Kaspersky Lab reported the vulnerability, <\/strong>allocated <\/strong>CVE-2019-0797<\/strong>to Microsoft, which has released a <\/strong>patch<\/strong><\/a>.<\/strong><\/p>\n

Zero-day vulnerabilities are previously unknownsoftware bugs that can be exploited by attackers to breacha victim\u2019s device and network. The new exploit uses a vulnerability in Microsoft Windows\u2019 graphic subsystem to achieve \u00a0local privilege escalation.This provides the attacker with full control over a victim\u2019s computer. The malware sample examined by Kaspersky Lab researchers shows that the exploit targetsOS versionsWindows 8 to Windows 10.<\/strong><\/p>\n

The researchers believe the detected exploit could have be used by several threat actors including, but possibly not limited to, FruityArmor and SandCat. FruityArmor is known to have used zero-days in the past, while SandCat is a new threat actor discovered only recently.<\/p>\n

\u201cThe discovery of a new Windows zero-day being actively exploited in the wild shows that such expensive and rare tools remain of great interest to threat actors, and organizations need security solutions that can protect against such unknown threats. It also reaffirms the importance of collaboration between the security industry and software developers: bug hunting, responsible disclosure and prompt patching are the best ways of keeping users safe from new and emerging threats<\/em>,\u201d \u2013 said Anton Ivanov, a security expert at Kaspersky Lab.<\/p>\n

The exploited vulnerability was detected by Kaspersky Lab\u2019s Automatic Exploit Prevention technology, embedded in most of the company\u2019s products.<\/p>\n

Kaspersky Lab products detectthe exploit as:<\/p>\n

 <\/p>\n