New attack uses MSC files and Windows XSS flaw to breach networks

Started by ixsky,

Previous topic - Next topic

ixsky

New attack uses MSC files and Windows XSS flaw to breach networks

A novel command execution technique dubbed 'GrimResource' uses specially crafted MSC (Microsoft Saved Console) and an unpatched Windows XSS flaw to perform code execution via the Microsoft Management Console. [...]

Source: New attack uses MSC files and Windows XSS flaw to breach networks