
Indeed, Mandiant says that it "anticipates broad, rapid adoption of the CVE-2023-23397 exploit by multiple nation-state and financially motivated actors, including both criminal and cyber espionage actors." Pass the Hash attack Given that this is a no-user-interaction exploit, the potential for harm is high.

The race has already begun." Multiple proofs-of-concept now widely availableįurthermore, Mandiant says that multiple proofs-of-concept are now widely available. This is an excellent tool for nation-state actors and criminals alike who will be on a bonanza in the short term. "These are spies, and they have a long track record of successfully evading our notice.


"This is more evidence that aggressive, disruptive, and destructive cyberattacks may not remain constrained to Ukraine and a reminder that we cannot see everything," John Hultquist, head of Mandiant Intelligence Analysis at Google Cloud, said.
