ZeroFox Intelligence Flash Report - Alleged Sale of Three Exploits, Including Two Zero-Days

ZeroFox Intelligence Flash Report - Alleged Sale of Three Exploits, Including Two Zero-Days

Product Serial: F-2024-01-09b

TLP:CLEAR

In this flash report, ZeroFox researchers report on the announcement on the dark web of the sale of three exploits: two zero-day vulnerabilities impacting SonicWall Virtual Private Networks and Microsoft Windows, and a third one-day vulnerability in an undisclosed JetBrains product.

Standing Intelligence Requirements

Deep Dark Web and Criminal Underground

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

• On January 7, 2024, untested threat actor “DrakenSnow” announced the sale of three exploits: two zero-day vulnerabilities impacting SonicWall Virtual Private Networks and Microsoft Windows, and a third one-day vulnerability in an undisclosed JetBrains product.
• ZeroFox can neither independently confirm nor disconfirm the veracity of the actor’s claims, as there are an almost equal amount of positive and negative indicators of credibility surrounding the actor and the alleged exploits.
• Despite the typically low credibility of sales of zero-day and one-day exploits, ZeroFox observed their increasing prevalence on deep and dark web (DDW) forums in 2023.