ZeroFox Intelligence Flash Report - New Exploitation of Existing Vulnerability Announced for Sale

Product Serial: F-2024-09-13a

TLP:CLEAR

In this Flash Report, ZeroFox researchers report on a recent dark web announcement, advertising the sale of an exploitation that leverages an existing vulnerability.

Standing Intelligence Requirements

Deep Dark Web and Criminal Underground DDW

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

On September 6, 2024, an actor known as “skng” posted in the dark web forum xss advertising a new malicious script that is allegedly designed to target Fortinet software solutions.
The product allegedly enables the exploitation of an existing critical vulnerability known as CVE-2022-40684, which was discovered in early October 2022.
The vast majority of network exploitation leverages old or existing vulnerabilities that have since been remedied by software manufacturers. Threat actors are able to capitalize on the users that have not conducted the appropriate software updates and gain initial network access.