"Wicked Rose" and MS Word Exploitation
ID: 062e0f82-e380-4137-8314-b9d3e9f431f7
STIX ID: report--062e0f82-e380-4137-8314-b9d3e9f431f7
Threat Score
60/100
Uploaded: 2026-08-21
Published Date: 2012-11-13
Last Modified Date: 2012-11-13
Created by: dogesec
TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
This report profiles the NCPH hacking group led by Wicked Rose, outlining their private exploits for Microsoft Word and Excel, the GinWui rootkit, and a series of targeted zero-day attacks during 2005–2006, while detailing the group's structure, affiliates, and pay-for-hacking model as a sophisticated for-hire threat actor.
