logo

"Wicked Rose" and MS Word Exploitation

ID: 062e0f82-e380-4137-8314-b9d3e9f431f7

STIX ID: report--062e0f82-e380-4137-8314-b9d3e9f431f7

Threat Score

60/100

Uploaded: 2026-08-21

Published Date: 2012-11-13

Last Modified Date: 2012-11-13

Created by: dogesec

TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
This report profiles the NCPH hacking group led by Wicked Rose, outlining their private exploits for Microsoft Word and Excel, the GinWui rootkit, and a series of targeted zero-day attacks during 2005–2006, while detailing the group's structure, affiliates, and pay-for-hacking model as a sophisticated for-hire threat actor.