Microsoft fixes Windows zero-day bug exploited in ransomware attacks: Report
The researchers said they saw at least five different exploits of this kind, which were used in attacks on retail and wholesale, energy, manufacturing, healthcare, software development and other industries.
![Microsoft fixes Windows zero-day bug exploited in ransomware attacks: Report Microsoft fixes Windows zero-day bug exploited in ransomware attacks: Report](https://cdn.zeebiz.com/ads/placeholder_image-zeebiz.jpg)
Microsoft has fixed a zero-day vulnerability affecting all supported versions of Windows, which experts say hackers exploited to launch ransomware attacks, a new report said on Thursday.
In February, researchers discovered an attack using a zero-day vulnerability in the Microsoft Common Log File System (CLFS). A cybercriminal group used an exploit developed for different versions and builds of Windows OS, including Windows 11 and attempted to deploy a Nokoyawa ransomware attack, according to the cybersecurity firm Kaspersky.
Microsoft assigned `CVE-2023-28252` to the discovered zero-day bug.
Attackers used the CVE-2023-28252 vulnerability to elevate privileges and steal credentials from the Security Account Manager (SAM) database.
While most of the vulnerabilities are used by APTs (Advanced Persistent Threat), the researchers stated that this one turned out to be exploited for cybercrime purposes by a sophisticated group that carries out ransomware attacks.
"Cybercrime groups are becoming increasingly more sophisticated using zero-day exploits in their attacks. Previously it was primarily a tool of APTs, but now cybercriminals have the resources to acquire zero-days and routinely use them in attacks," said Boris Larin, Lead Security Researcher with the Global Research and Analysis Team (GReAT).
"It`s very important for businesses to download the latest patch from Microsoft as soon as possible, and use other methods of protection, such as EDR solutions," he added.
Moreover, the report said that the hackers also attempted to execute similar elevation of privilege exploits in attacks on different small and medium-sized businesses in the Middle East and North America, and previously in Asia regions.
The researchers said they saw at least five different exploits of this kind, which were used in attacks on retail and wholesale, energy, manufacturing, healthcare, software development and other industries.
Get Latest Business News, Stock Market Updates and Videos; Check your tax outgo through Income Tax Calculator and save money through our Personal Finance coverage. Check Business Breaking News Live on Zee Business Twitter and Facebook. Subscribe on YouTube.
RECOMMENDED STORIES
![https://www.zeebiz.com/trending/news-bengaluru-traffic-woes-city-congestion-worsens-as-hsr-layout-flyover-shuts-for-metro-work-netizens-irked-bengaluru-traffic-update-346582](https://cdn.zeebiz.com/sites/default/files/styles/zeebiz_700x394/public/2025/02/12/352509-image-fotor-20250212141632-1.png?itok=eTuNO4X3)
'Bengaluru, absolute traffic hell...: City's congestion worsens as HSR Layout flyover shuts for metro work, netizens irked
![https://www.zeebiz.com/personal-finance/photo-gallery-gratuity-calculation-what-will-be-your-gratuity-on-rs-40000-last-drawn-basic-salary-and-5-years-2-months-of-service-know-eligibility-formula-step-by-step-guide-346680](https://cdn.zeebiz.com/sites/default/files/styles/zeebiz_700x394/public/2025/02/12/352619-gratuity.jpg?itok=a3CD9W7U)
Gratuity Calculation: What will be your gratuity on Rs 40,000 last-drawn basic salary and 5.2 years of service?
![https://www.zeebiz.com/personal-finance/photo-gallery-8th-pay-commission-basic-monthly-salary-pension-slab-calculator-can-basic-pension-cross-inr-rs-300000-barrier-in-new-pay-scale-see-calculations-to-know-projected-fitment-factor-index-7th-pm-modi-old-346525](https://cdn.zeebiz.com/sites/default/files/styles/zeebiz_700x394/public/2025/02/12/352430-note-coin-pixabay-take.jpg?itok=yDmxceKf)
8th Pay Commission: Can basic pension cross Rs 3 lakh mark in new pay commission? See calculations to know its possibility?
![https://www.zeebiz.com/personal-finance/photo-gallery-sbi-444-day-fd-vs-central-bank-of-india-444-day-fixed-deposit-which-can-provide-higher-maturity-on-rs-500000-700000-1000000-deposits-compare-interest-rates-for-maximise-returns-with-special-fd-346476](https://cdn.zeebiz.com/sites/default/files/styles/zeebiz_700x394/public/2025/02/12/352408-special-fd.jpg?itok=myx6xfFk)
SBI 444-day FD vs Central Bank of India 444-day FD: Which can provide higher maturity on Rs 5,00,000, Rs 7,00,000 & Rs 10,00,000 deposits?
![https://www.zeebiz.com/personal-finance/photo-gallery-ups-vs-nps-vs-ops-calculator-last-drawn-basic-salary-pay-inr-rs-100000-30-years-of-service-what-will-monthly-pension-for-central-government-employees-unified-national-old-system-india-official-portal-346336](https://cdn.zeebiz.com/sites/default/files/styles/zeebiz_700x394/public/2025/02/11/352270-top-7-sip-mutual-funds-4.jpg?itok=F6h37i4L)
UPS vs NPS vs OPS: Last drawn basic pay Rs 100,000; pensionable service of 30 years; what can be your monthly pension in each?
![https://www.zeebiz.com/personal-finance/photo-gallery-dearness-relief-dr-pension-central-government-employee-calculator-calculations-is-your-basic-pension-rs-25000-35000-40000-50000-know-total-amount-AICPI-consumer-index-DA-benchmark-346424](https://cdn.zeebiz.com/sites/default/files/styles/zeebiz_700x394/public/2025/02/12/352375-untitled-design.jpg?itok=1_intAoD)
Monthly Pension Calculations: Is your basic pension Rs 25,000, Rs 35,000, or Rs 50,000? Know what can be your total pension as per latest DR rates
07:44 AM IST