LevelBlue - Open Threat Exchange By msudosos Archived: 2026-04-06 03:11:03 UTC https://otx.alienvault.com/browse/pulses?q=tag:rawdisk Page 1 of 6 CVE-2024-24919 CVE: 2 | FileHash-MD5: 52 | FileHash-SHA1: 52 | FileHash-SHA256: 240 | URL: 3 | Domain: 7 | Email: 1 | Hostname: 8 https://otx.alienvault.com/browse/pulses?q=tag:rawdisk Page 2 of 6 This Is Unacceptable. #espionage 41 Subscribers Threat Research | FireEye Inc https://otx.alienvault.com/browse/pulses?q=tag:rawdisk Page 3 of 6 Find out more about FireEye.com, the world's leading cyber security company, which provides security services to more than 1.5 million customers across the globe, and offers a wide range of products and services. 17 Subscribers Second Wave of Shamoon 2 Attacks Identified FileHash-SHA256: 4 In November 2016, we observed the reemergence of destructive attacks associated with the 2012 Shamoon attack campaign. We covered this attack in detail in our blog titled Shamoon 2: Return of the Disttrack Wiper, which targeted a single organization in Saudi Arabia and was set to wipe systems on November 17, 2016. Since our previous publication, we have found another, similar but different payload used to target a second organization in Saudi Arabia that was configured to wipe systems twelve days later on November 29, 2016. This latest attack potentially materially impacts one of the primary countermeasures employed against wiper attacks: Virtual Desktop Interface snapshots. 374,057 Subscribers https://otx.alienvault.com/browse/pulses?q=tag:rawdisk Page 4 of 6 Shamoon Shamoon is back in Saudi Arabia https://otx.alienvault.com/browse/pulses?q=tag:rawdisk Page 5 of 6 12 Subscribers Source: https://otx.alienvault.com/browse/pulses?q=tag:rawdisk https://otx.alienvault.com/browse/pulses?q=tag:rawdisk Page 6 of 6