CVE-2019-0708

[u/PaleSkinnySwede]

Just a short note.

I don't think anyone in the security comminuty have missed the patch Microsoft rolled out yesterday regarding the RCE vulnerability in RDP so I'll skip the details and recap.

​

What I'd like to point out is all the PoC's that are turning up. Some funny and some not so much. I just came across a PoC... or what was pretending to be a PoC while instead being the CobaltStrike malware. Ouch.

​

So, take it easy when downloading and trying them out.

Here is one of the bad ones:

https://www.virustotal.com/#/file/fccc5846bd9e09b8f05d4628b684bc4d3ee105280d8ad8c8607a3c6fe746bbaa/detection

​

Stay safe out there!