Actors Still Exploiting SharePoint Vulnerability to Attack Middle East Government Organizations
released on 2020-02-03 @ 04:04:52 PM
On September 10, 2019, we observed unknown threat actors exploiting a vulnerability in SharePoint described in CVE-2019-0604 to install several webshells on the website of a Middle East government organization. One of these webshells is the open source AntSword webshell freely available on Github, which is remarkably similar to the infamous China Chopper webshell.