Trusted Design

Acronis True Image fails to update itself securely

概要

Acronis True Image fails to securely check for and retrieve updates, which an allow an authenticated attacker to execute arbitrary code with administrator privileges. Description Acronis True Image is a disk backup utility for Windows and Mac systems. Acronis True Image versions through and including 2017 Build 8053 performs update operations over unprotected HTTP channels. Downloaded updates are not validated beyond verifying the server-provided MD5 hash

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

Acronis True Image fails to update itself securely (score: 0.98)
ISO Images of Linux Mint with Tsunami Backdoor (score: 0.42)
Backdoor.Darpapox (score: 0.42)
UPS: Observations on CVE-2015-3113 (score: 0.41)
Backdoor.Joanap (score: 0.41)

このPulseに関連する脅威アクター (事実ベース)

Kimsuky

Score: 13.57

Matched TTPs:

T1583 - Acquire Infrastructure
T1041 - Exfiltration Over C2 Channel
T1055.012 - Process Hollowing
T1550.002 - Pass the Hash
T1078.003 - Local Accounts

MITREへのリンク →

Sea Turtle

Score: 7.19

Matched TTPs:

T1583 - Acquire Infrastructure
T1203 - Exploitation for Client Execution
T1078.003 - Local Accounts

MITREへのリンク →

Ember Bear

Score: 7.27

Matched TTPs:

T1583 - Acquire Infrastructure
T1203 - Exploitation for Client Execution
T1550.002 - Pass the Hash

MITREへのリンク →

Indrik Spider

Score: 3.03

Matched TTPs:

T1583 - Acquire Infrastructure

MITREへのリンク →

Agrius

Score: 5.01

Matched TTPs:

T1583 - Acquire Infrastructure
T1041 - Exfiltration Over C2 Channel

MITREへのリンク →

Contagious Interview

Score: 5.01

Matched TTPs:

T1583 - Acquire Infrastructure
T1041 - Exfiltration Over C2 Channel

MITREへのリンク →

Sandworm Team

Score: 6.50

Matched TTPs:

T1583 - Acquire Infrastructure
T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution

MITREへのリンク →

Star Blizzard

Score: 3.03

Matched TTPs:

T1583 - Acquire Infrastructure

MITREへのリンク →

Chimera

Score: 4.72

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1550.002 - Pass the Hash

MITREへのリンク →

GALLIUM

Score: 4.72

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1550.002 - Pass the Hash

MITREへのリンク →

Higaisa

Score: 3.47

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution

MITREへのリンク →

Lazarus Group

Score: 14.66

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution
T1008 - Fallback Channels
T1561.001 - Disk Content Wipe
T1529 - System Shutdown/Reboot

MITREへのリンク →

Mustang Panda

Score: 3.47

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution

MITREへのリンク →

APT3

Score: 3.47

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution

MITREへのリンク →

APT32

Score: 8.88

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution
T1550.002 - Pass the Hash
T1078.003 - Local Accounts

MITREへのリンク →

BlackByte

Score: 5.12

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1055.012 - Process Hollowing

MITREへのリンク →

Confucius

Score: 3.47

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution

MITREへのリンク →

Wizard Spider

Score: 4.72

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1550.002 - Pass the Hash

MITREへのリンク →

Leviathan

Score: 3.47

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution

MITREへのリンク →

Gamaredon Group

Score: 6.11

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1561.001 - Disk Content Wipe

MITREへのリンク →

MuddyWater

Score: 3.47

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1203 - Exploitation for Client Execution

MITREへのリンク →

Gorgon Group

Score: 3.15

Matched TTPs:

T1055.012 - Process Hollowing

MITREへのリンク →

Threat Group-3390

Score: 4.65

Matched TTPs:

T1055.012 - Process Hollowing
T1203 - Exploitation for Client Execution

MITREへのリンク →

Patchwork

Score: 4.65

Matched TTPs:

T1055.012 - Process Hollowing
T1203 - Exploitation for Client Execution

MITREへのリンク →

TA2541

Score: 3.15

Matched TTPs:

T1055.012 - Process Hollowing

MITREへのリンク →

menuPass

Score: 3.15

Matched TTPs:

T1055.012 - Process Hollowing

MITREへのリンク →

APT37

Score: 9.25

Matched TTPs:

T1036.001 - Invalid Code Signature
T1203 - Exploitation for Client Execution
T1529 - System Shutdown/Reboot

MITREへのリンク →

Windshift

Score: 4.13

Matched TTPs:

T1036.001 - Invalid Code Signature

MITREへのリンク →

APT28

Score: 4.24

Matched TTPs:

T1203 - Exploitation for Client Execution
T1550.002 - Pass the Hash

MITREへのリンク →

APT29

Score: 13.24

Matched TTPs:

T1203 - Exploitation for Client Execution
T1090.004 - Domain Fronting
T1651 - Cloud Administration Command
T1078.003 - Local Accounts

MITREへのリンク →

UNC3886

Score: 4.93

Matched TTPs:

T1203 - Exploitation for Client Execution
T1008 - Fallback Channels

MITREへのリンク →

Tropic Trooper

Score: 4.16

Matched TTPs:

T1203 - Exploitation for Client Execution
T1078.003 - Local Accounts

MITREへのリンク →

APT41

Score: 7.68

Matched TTPs:

T1203 - Exploitation for Client Execution
T1550.002 - Pass the Hash
T1008 - Fallback Channels

MITREへのリンク →

OilRig

Score: 9.47

Matched TTPs:

T1203 - Exploitation for Client Execution
T1137.004 - Outlook Home Page
T1008 - Fallback Channels

MITREへのリンク →

FIN7

Score: 6.11

Matched TTPs:

T1008 - Fallback Channels
T1078.003 - Local Accounts

MITREへのリンク →

APT38

Score: 3.62

Matched TTPs:

T1529 - System Shutdown/Reboot

MITREへのリンク →

Medusa Group

Score: 3.62

Matched TTPs:

T1529 - System Shutdown/Reboot

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Lazarus Group

Score: 0.76

Matched TTPs:

T1008 - Fallback Channels
T1041 - Exfiltration Over C2 Channel
T1529 - System Shutdown/Reboot
T1203 - Exploitation for Client Execution
T1561.001 - Disk Content Wipe

MITREへのリンク →

Kimsuky

Score: 0.68

Matched TTPs:

T1041 - Exfiltration Over C2 Channel
T1550.002 - Pass the Hash
T1055.012 - Process Hollowing
T1078.003 - Local Accounts
T1583 - Acquire Infrastructure

MITREへのリンク →

APT29

Score: 0.67

Matched TTPs:

T1090.004 - Domain Fronting
T1651 - Cloud Administration Command
T1078.003 - Local Accounts
T1203 - Exploitation for Client Execution

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る