IoC Investigation

CVE-2020-1472

CVE IN DATABASE

CVE Identifier · threat 0.95 · 12× seen · 0 datasets · Exploited Vulnerability · last seen Aug 23, 2026

🔄 Pivot:📁 Exploited Vulnerability🦠 Ryuk, Conti (Zerologon)🏹 Wizard Spider (RU)

Threat Score

0.95

Sightings

12
0 sources

Detected Type

CVE

Enrichments

3

Related IoCs

20
Full OSINT Pivot + Case Create Case Takedown Export STIX/MISP ← Browse All

Vulnerability Intelligence

Cross-reference against NVD, CISA KEV, and public exploit databases.

↗ NVD↗ CISA KEV↗ Exploit-DB↗ MITRE↗ CVE Details

Seen in Datasets (0)

Not linked to any dataset.

Enrichments

classificationmalware_familyactor

OSINT Pivots

Full OSINT (30+ lookups) ↗ NVD ↗ CISA KEV ↗ Exploit-DB ↗ MITRE ↗ CVE Details Link Analysis ↗ OpenSanctions

Related Indicators (20)

Indicators sharing the same category.

IndicatorTypeCategoryThreat
CVE-2021-40539 CVE Exploited Vulnerability investigate →
CVE-2021-21985 CVE Exploited Vulnerability investigate →
CVE-2021-21972 CVE Exploited Vulnerability investigate →
CVE-2021-22005 CVE Exploited Vulnerability investigate →
CVE-2020-3992 CVE Exploited Vulnerability investigate →
CVE-2019-5544 CVE Exploited Vulnerability investigate →
CVE-2020-12271 CVE Exploited Vulnerability investigate →
CVE-2021-20016 CVE Exploited Vulnerability investigate →
CVE-2019-7481 CVE Exploited Vulnerability investigate →
CVE-2021-20023 CVE Exploited Vulnerability investigate →
CVE-2021-20022 CVE Exploited Vulnerability investigate →
CVE-2021-20021 CVE Exploited Vulnerability investigate →
CVE-2021-35211 CVE Exploited Vulnerability investigate →
CVE-2018-2380 CVE Exploited Vulnerability investigate →
CVE-2019-11539 CVE Exploited Vulnerability investigate →
CVE-2019-11510 CVE Exploited Vulnerability investigate →
CVE-2021-22893 CVE Exploited Vulnerability investigate →
CVE-2019-18935 CVE Exploited Vulnerability investigate →
CVE-2021-36955 CVE Exploited Vulnerability investigate →
CVE-2021-26857 CVE Exploited Vulnerability investigate →

Copy as STIX 2.1 

{
    "type": "indicator",
    "spec_version": "2.1",
    "id": "indicator--7531b9b0-7801-4d6d-0f8c-000050ea0c62",
    "created": "2026-09-13T13:59:37Z",
    "modified": "2026-09-13T13:59:37Z",
    "name": "CVE Identifier: CVE-2020-1472",
    "pattern": "[x-custom-object:value = 'CVE-2020-1472']",
    "pattern_type": "stix",
    "valid_from": "2026-09-13T13:59:37Z",
    "labels": [
        "exploited vulnerability"
    ],
    "confidence": 50
}

Linked Cases (12)

CASE-20260821-1FC8 — Wizard Spider (RU) — Actor / APT OPEN
CASE-20260822-FF24 — Wizard Spider (RU) — Actor / APT OPEN
CASE-20260823-1628 — Wizard Spider (RU) — Actor / APT OPEN
CASE-20260823-6622 — Ryuk, Conti (Zerologon) — Malware OPEN
CASE-20260829-ADD3 — Ryuk, Conti (Zerologon) — Malware OPEN
CASE-20260829-DE72 — Ryuk — Malware OPEN
CASE-20260829-5661 — CVE-2020-1472 — IoC OPEN
CASE-20260829-69D4 — Wizard Spider — Actor / APT OPEN
CASE-20260830-787D — Wizard Spider (RU) — Actor / APT OPEN
CASE-20260830-5C2D — Conti — Malware OPEN
CASE-20260902-5BEF — Wizard Spider (RU) — Actor / APT OPEN
CASE-20260907-E789 — CVE-2020-1472 — IoC OPEN
+ Add to Case Create Alert
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center