Will DormannMore than one month after Elastic Security Labs publicly described "LNK Stomping" (now CVE-2024-38217) exploit variants, the "path segment" variant has still zero detections on VirusTotal.
I slapped together a naive YARA rule that seems to work well to detect this variant of CVE-2024-38217 exploits:
https://gist.github.com/wdormann/7379c4c4fb0631d8ec6a5b12d50ba782
All GNU social JP content and data are available under the