Cybersecurity News - Page 206

The threat actors are chaining three vulnerabilities in the Veritas software - CVE-2021-27876, CVE-2021-27877 and CVE-2021-27878.

Threat actors have been observed exploiting sites running Magento, WooCommerce, WordPress, and Shopify digital commerce platforms.

The largest known individual theft so far involved almost $8 million in USDT (Tether).

The world in brief: MOVEit zero-day mass exploited in data stealing attacks, 250+ Gigabyte motherboard models come with firmware backdoor, and more.

The ongoing campaign was first spotted on May 19, 2023.

There is no evidence that the backdoor has been leveraged for malicious purposes.

Threat actors are targeting Linux routers with publicly exposed WEBUI to execute malicious scripts to deploy the GobRAT malware.

The group claims to have stolen 2TB of sensitive data from Casepoint.

The zero-day flaw had been exploited since October 2022, with hackers installing malware on the breached devices.

The team notes that UAC-0006 has changed some of its TTPs, including the use of multiple infection methods, and the Cobalt Strike Beacon tool.