https://vulnerability.circl.lu/sightings/feed 2026-07-06T23:00:15.870698+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/cdf07331-d872-48c4-a66f-5869dd870fbd/export 2026-07-06T23:00:15.893142+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cdf07331-d872-48c4-a66f-5869dd870fbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11859", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:37.000000Z"} 2025-09-10T07:00:37+00:00 https://vulnerability.circl.lu/sighting/5a6c3489-93b5-4a6d-9264-b9184c9483d4/export 2026-07-06T23:00:15.896319+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5a6c3489-93b5-4a6d-9264-b9184c9483d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11850", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"} 2025-08-11T18:27:49+00:00 https://vulnerability.circl.lu/sighting/e6af74c6-6485-4c5a-8aeb-44d5b5241b79/export 2026-07-06T23:00:15.896439+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e6af74c6-6485-4c5a-8aeb-44d5b5241b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11859", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:37.000000Z"} 2025-08-09T17:25:37+00:00 https://vulnerability.circl.lu/sighting/ae6292e0-8c5a-416f-9f21-3ebedcf7f61c/export 2026-07-06T23:00:15.896530+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ae6292e0-8c5a-416f-9f21-3ebedcf7f61c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11857", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqmfsurrzh2r", "content": "", "creation_timestamp": "2025-06-02T08:56:48.612690Z"} 2025-06-02T08:56:48.612690+00:00 https://vulnerability.circl.lu/sighting/b837a156-2ce6-4a73-98f0-bb4a2159a977/export 2026-07-06T23:00:15.896616+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b837a156-2ce6-4a73-98f0-bb4a2159a977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11857", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqlvjxbmjb42", "content": "", "creation_timestamp": "2025-06-02T04:05:47.253922Z"} 2025-06-02T04:05:47.253922+00:00 https://vulnerability.circl.lu/sighting/b6c23d36-9141-4662-acc7-37758e4b29b5/export 2026-07-06T23:00:15.896696+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b6c23d36-9141-4662-acc7-37758e4b29b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11859", "type": "seen", "source": "https://t.me/kasperskylab_ru/6100", "content": "\ud83d\udcaa \u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u2014 \u0437\u0430\u043b\u043e\u0433 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n \n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0441\u0442\u0440\u0435\u043c\u044f\u0442\u0441\u044f \u043a \u043e\u0431\u0449\u0435\u0439 \u0446\u0435\u043b\u0438: \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0438\u043b\u0438\u044f \u0432 \u0431\u043e\u0440\u044c\u0431\u0435 \u0441 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0430\u043c \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u043e\u0431\u043c\u0435\u043d \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u0438 \u043e\u043f\u044b\u0442\u043e\u043c.\n \n\u0422\u0430\u043a, \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u044f \u0430\u0442\u0430\u043a\u0443 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 ToddyCat, \u043d\u0430\u0448 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 DLL-\u0444\u0430\u0439\u043b TCESB. \u042d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u2014 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 EPP-\u0440\u0435\u0448\u0435\u043d\u0438\u044f ESET, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n \n\u041c\u044b \u0441\u0440\u0430\u0437\u0443 \u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u044d\u0442\u043e\u043c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c ESET. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u043e\u043c\u0435\u0440 CVE-2024-11859, \u0438 \u0432\u0435\u043d\u0434\u043e\u0440 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043f\u043e\u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u0438\u043b \u043d\u0430\u0448\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u0430 \u0437\u0430 \u043f\u0440\u043e\u0434\u0435\u043b\u0430\u043d\u043d\u0443\u044e \u0440\u0430\u0431\u043e\u0442\u0443.\n \n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e\u0431 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445 TCESB \u0438 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u2014 \u0432 \u043d\u0430\u0448\u0435\u0439 \u043d\u043e\u0432\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435.\n\n#KD_APT", "creation_timestamp": "2025-04-11T10:34:19.000000Z"} 2025-04-11T10:34:19+00:00 https://vulnerability.circl.lu/sighting/2190b321-4de3-44e9-82ea-9b52bd60f35b/export 2026-07-06T23:00:15.896792+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2190b321-4de3-44e9-82ea-9b52bd60f35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11859", "type": "seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3lmjg2a7dh526", "content": "", "creation_timestamp": "2025-04-11T06:42:10.875965Z"} 2025-04-11T06:42:10.875965+00:00 https://vulnerability.circl.lu/sighting/7ae6061a-00ec-463b-a890-8027d362db8d/export 2026-07-06T23:00:15.896867+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7ae6061a-00ec-463b-a890-8027d362db8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11859", "type": "exploited", "source": "https://t.me/ton618cyber/8786", "content": "New TCESB Malware Found in Active Attacks Exploiting ESET Security Scanner\n\nToddyCat exploits ESET\u2019s CVE-2024-11859 flaw with TCESB malware, bypassing security tools via DLL hijacking.\n\nThe Hacker News | thehackernews.com \u2022 Apr 9, 2025", "creation_timestamp": "2025-04-10T12:02:37.000000Z"} 2025-04-10T12:02:37+00:00 https://vulnerability.circl.lu/sighting/c8330f30-4059-4be0-82ec-a6c6ad8f34d4/export 2026-07-06T23:00:15.896948+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c8330f30-4059-4be0-82ec-a6c6ad8f34d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11859", "type": "exploited", "source": "https://t.me/ton618cyber/3491", "content": "New TCESB Malware Found in Active Attacks Exploiting ESET Security Scanner\n\nToddyCat exploits ESET\u2019s CVE-2024-11859 flaw with TCESB malware, bypassing security tools via DLL hijacking.\n\nThe Hacker News | thehackernews.com \u2022 Apr 9, 2025", "creation_timestamp": "2025-04-10T12:02:37.000000Z"} 2025-04-10T12:02:37+00:00 https://vulnerability.circl.lu/sighting/76e3eaac-7b44-41aa-b14d-1ebb32813054/export 2026-07-06T23:00:15.897029+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "76e3eaac-7b44-41aa-b14d-1ebb32813054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11859", "type": "exploited", "source": "https://t.me/thehackernews/6638", "content": "\u26a1 New Malware Alert!\n\nChinese-linked ToddyCat exploited an ESET flaw (CVE-2024-11859) to drop new malware TCESB \u2014 bypassing defenses and hijacking devices.\n\nUpdate now | Stay alert.\n\nDetails \ud83d\udc49https://thehackernews.com/2025/04/new-tcesb-malware-found-in-active.html", "creation_timestamp": "2025-04-09T13:40:39.000000Z"} 2025-04-09T13:40:39+00:00