CVE-2020-7882 is a vulnerability tracked by ThreatCluster, appearing in 1 threat cluster built from 1 intelligence report mention.
CVE-2020-7882 is a vulnerability tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed July 30, 2026; most recent activity July 30, 2026.
From 2025 to mid-2026, a state-sponsored threat group exploited vulnerabilities in Korean financial security software, utilizing watering hole attacks and spear phishing to deploy backdoors named Struggle and Brandoor.…
CVE-2020-7882 is a vulnerability tracked by ThreatCluster, appearing in 1 threat cluster built from 1 intelligence report mention.
The most recent intelligence report mentioning CVE-2020-7882 on ThreatCluster is dated July 30, 2026.
Across ThreatCluster reporting, CVE-2020-7882 most frequently co-occurs with Lazarus, Phishing, Zero-day Exploit, Operation Double Barrel, Operation SyncHole, among 12 tracked related entities.
The most significant recent cluster is “Operation Double Barrel: State-Sponsored Exploitation of Korean Financial Software” (3 articles · Updated July 30, 2026). CVE-2020-7882 appears across 1 threat cluster in total, listed above with sources.
CVE-2020-7882 appears in 1 intelligence report mention across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.