FortiClient EMS flaw exploited to deploy EKZ infostealer via fake Fortinet patch
The threat actors appear to have abused trusted management channels to execute malicious PowerShell commands across connected systems.
In brief: KnowledgeDeliver zero-day exploited to deploy the Bluebeam malware, a FortiClient EMS flaw abused in EKZ Infostealer attacks, and more.
The threat actors appear to have abused trusted management channels to execute malicious PowerShell commands across connected systems.
The campaign targets border routers and network infrastructure rather than traditional endpoints.
Ajax first disclosed the breach in March, revealing that attackers exploited vulnerabilities in its IT infrastructure to access personal data.
The coordinated operation disrupted all Glasswormu2019s communication channels, cutting operators off from infected systems.
The UK action largely targets the A7 network, which officials say is a critical tool for sanctions circumvention and facilitating payments connected to Russian oil exports.
The updated InvisibleFerret malware is now distributed as .pyd files on Windows and .so files on macOS.