The Return of a Ghost: Unpacking the MiniPlasma Zero-Day Exploit

Malware News
1

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

The Return of a Ghost: Unpacking the MiniPlasma Zero-Day Exploit

Key Takeaways

  • The MiniPlasma zero-day exploit allows attackers to obtain SYSTEM-level privileges.
  • Fully patched Windows 11 systems remain vulnerable to this specific attack.
  • This exploit leverages an older vulnerability originally identified as CVE-2020-17103.
  • The attack uses thread token impersonation to successfully trigger a race condition.
  • The Picus Security Validation Platform simulates MiniPlasma attacks to test security controls.

MiniPlasma, a high-severity zero-day exploit based on CVE-2020-17103, grants SYSTEM access on Windows 11 and Server 2022/2025.

Article Link: The Return of a Ghost: Unpacking the MiniPlasma Zero-Day Exploit