Trusted Design

Acronis True Image fails to update itself securely

概要

Overview Acronis True Image fails to securely check for and retrieve updates, which an allow an authenticated attacker to execute arbitrary code with administrator privileges. Description Acronis True Image is a disk backup utility for Windows and Mac systems. Acronis True Image versions through and including 2017 Build 8053 performs update operations over unprotected HTTP channels. Downloaded updates are not validated beyond verifying the server-provided MD5 hash. Impact An attacker on the same network as, or who can otherwise affect network traffic from, an Acronis True Image user can cause the True Image update process to execute arbitrary code with system administrator privileges.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Acronis True Image fails to update itself securely (score: 0.98)
Backdoor.Darpapox (score: 0.44)
ISO Images of Linux Mint with Tsunami Backdoor (score: 0.44)
RedHat Enterprise Linux 7.1 Denial Of Service (score: 0.43)
Avira Management Console Update Manager Service HTTP Header (score: 0.43)

このPulseに関連する脅威アクター (事実ベース)

Kimsuky

Score: 13.57

Matched TTPs:

T1583 - Acquire Infrastructure
T1041 - Exfiltration Over C2 Channel
T1055.012 - Process Hollowing
T1550.002 - Pass the Hash
T1078.003 - Local Accounts

MITREへのリンク →

Sea Turtle

Score: 7.19

Matched TTPs:

T1583 - Acquire Infrastructure
T1203 - Exploitation for Client Execution
T1078.003 - Local Accounts

MITREへのリンク →

Ember Bear

Score: 7.27

Matched TTPs:

T1583 - Acquire Infrastructure
T1203 - Exploitation for Client Execution
T1550.002 - Pass the Hash

MITREへのリンク →

Indrik Spider

Score: 3.03

Matched TTPs:

T1583 - Acquire Infrastructure

MITREへのリンク →

Agrius

Score: 5.01

Matched TTPs:

T1583 - Acquire Infrastructure
T1041 - Exfiltration Over C2 Channel

MITREへのリンク →

Contagious Interview

Score: 5.01

Matched TTPs:

T1583 - Acquire Infrastructure
T1041 - Exfiltration Over C2 Channel

MITREへのリンク →

Sandworm Team

Score: 9.79

Matched TTPs:

T1583 - Acquire Infrastructure
T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution
T1490 - Inhibit System Recovery

MITREへのリンク →

Star Blizzard

Score: 3.03

Matched TTPs:

T1583 - Acquire Infrastructure

MITREへのリンク →

UNC3886

Score: 9.47

Matched TTPs:

T1548 - Abuse Elevation Control Mechanism
T1203 - Exploitation for Client Execution
T1008 - Fallback Channels

MITREへのリンク →

Equation

Score: 8.67

Matched TTPs:

T1542.002 - Component Firmware
T1564.005 - Hidden File System

MITREへのリンク →

Scattered Spider

Score: 5.26

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1490 - Inhibit System Recovery

MITREへのリンク →

Chimera

Score: 4.72

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1550.002 - Pass the Hash

MITREへのリンク →

GALLIUM

Score: 4.72

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1550.002 - Pass the Hash

MITREへのリンク →

Higaisa

Score: 6.39

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution
T1090.001 - Internal Proxy

MITREへのリンク →

APT39

Score: 8.34

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1197 - BITS Jobs
T1090.001 - Internal Proxy

MITREへのリンク →

Lazarus Group

Score: 21.72

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution
T1027.007 - Dynamic API Resolution
T1008 - Fallback Channels
T1090.001 - Internal Proxy
T1561.001 - Disk Content Wipe
T1529 - System Shutdown/Reboot

MITREへのリンク →

Mustang Panda

Score: 7.60

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution
T1027.007 - Dynamic API Resolution

MITREへのリンク →

APT3

Score: 3.47

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution

MITREへのリンク →

APT32

Score: 8.88

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution
T1550.002 - Pass the Hash
T1078.003 - Local Accounts

MITREへのリンク →

BlackByte

Score: 8.41

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1055.012 - Process Hollowing
T1490 - Inhibit System Recovery

MITREへのリンク →

Confucius

Score: 3.47

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution

MITREへのリンク →

Wizard Spider

Score: 11.44

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1197 - BITS Jobs
T1550.002 - Pass the Hash
T1490 - Inhibit System Recovery

MITREへのリンク →

Leviathan

Score: 6.91

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution
T1197 - BITS Jobs

MITREへのリンク →

Gamaredon Group

Score: 6.11

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1561.001 - Disk Content Wipe

MITREへのリンク →

MuddyWater

Score: 3.47

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution

MITREへのリンク →

FIN13

Score: 10.21

Matched TTPs:

T1565 - Data Manipulation
T1550.002 - Pass the Hash
T1090.001 - Internal Proxy

MITREへのリンク →

TeamTNT

Score: 4.54

Matched TTPs:

T1204.003 - Malicious Image

MITREへのリンク →

Gorgon Group

Score: 3.15

Matched TTPs:

T1055.012 - Process Hollowing

MITREへのリンク →

Threat Group-3390

Score: 4.65

Matched TTPs:

T1055.012 - Process Hollowing
T1203 - Exploitation for Client Execution

MITREへのリンク →

Patchwork

Score: 8.08

Matched TTPs:

T1055.012 - Process Hollowing
T1203 - Exploitation for Client Execution
T1197 - BITS Jobs

MITREへのリンク →

TA2541

Score: 3.15

Matched TTPs:

T1055.012 - Process Hollowing

MITREへのリンク →

menuPass

Score: 3.15

Matched TTPs:

T1055.012 - Process Hollowing

MITREへのリンク →

APT37

Score: 9.25

Matched TTPs:

T1036.001 - Invalid Code Signature
T1203 - Exploitation for Client Execution
T1529 - System Shutdown/Reboot

MITREへのリンク →

Windshift

Score: 4.13

Matched TTPs:

T1036.001 - Invalid Code Signature

MITREへのリンク →

APT28

Score: 12.91

Matched TTPs:

T1203 - Exploitation for Client Execution
T1550.002 - Pass the Hash
T1550.001 - Application Access Token
T1669 - Wi-Fi Networks

MITREへのリンク →

APT29

Score: 13.24

Matched TTPs:

T1203 - Exploitation for Client Execution
T1090.004 - Domain Fronting
T1651 - Cloud Administration Command
T1078.003 - Local Accounts

MITREへのリンク →

Tropic Trooper

Score: 4.16

Matched TTPs:

T1203 - Exploitation for Client Execution
T1078.003 - Local Accounts

MITREへのリンク →

APT41

Score: 11.12

Matched TTPs:

T1203 - Exploitation for Client Execution
T1197 - BITS Jobs
T1550.002 - Pass the Hash
T1008 - Fallback Channels

MITREへのリンク →

OilRig

Score: 9.47

Matched TTPs:

T1203 - Exploitation for Client Execution
T1137.004 - Outlook Home Page
T1008 - Fallback Channels

MITREへのリンク →

Strider

Score: 7.06

Matched TTPs:

T1564.005 - Hidden File System
T1090.001 - Internal Proxy

MITREへのリンク →

HAFNIUM

Score: 6.80

Matched TTPs:

T1550.001 - Application Access Token
T1078.003 - Local Accounts

MITREへのリンク →

FIN7

Score: 6.11

Matched TTPs:

T1008 - Fallback Channels
T1078.003 - Local Accounts

MITREへのリンク →

Medusa Group

Score: 6.91

Matched TTPs:

T1490 - Inhibit System Recovery
T1529 - System Shutdown/Reboot

MITREへのリンク →

Storm-0501

Score: 3.29

Matched TTPs:

T1490 - Inhibit System Recovery

MITREへのリンク →

Velvet Ant

Score: 5.59

Matched TTPs:

T1090.001 - Internal Proxy
T1078.003 - Local Accounts

MITREへのリンク →

Turla

Score: 5.59

Matched TTPs:

T1090.001 - Internal Proxy
T1078.003 - Local Accounts

MITREへのリンク →

APT38

Score: 3.62

Matched TTPs:

T1529 - System Shutdown/Reboot

MITREへのリンク →

Blue Mockingbird

Score: 4.54

Matched TTPs:

T1574.012 - COR_PROFILER

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Lazarus Group

Score: 0.77

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1529 - System Shutdown/Reboot
T1090.001 - Internal Proxy
T1008 - Fallback Channels
T1203 - Exploitation for Client Execution
T1027.007 - Dynamic API Resolution
T1561.001 - Disk Content Wipe

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る