Ransomwarecritical

CISA and FBI Warn of Global Threat from Ghost Ransomware

Infosecurity Magazineby Phil MuncasterFeb 20, 2025 · 09:45 UTC (Feb 20, 2025)2 min read2

Read at infosecurity-magazine.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-13379 CVE-2010-2861 CVE-2009-3960 CVE-2021-34473 CVE-2021-34523 CVE-2021-31207

Tags: cve-2018-13379 cve-2010-2861 cve-2009-3960 cve-2021-34473 cve-2021-34523 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2009-3960	Information Disclosure in Adobe BlazeDS (Used by LiveCycle and ColdFusion)	—	90%	KEVRansomware	— KEV Mar 7, 2022
CVE-2010-2861	Directory Traversal in Adobe ColdFusion Administrator Console	9.8	100%	KEVRansomwarePoC	Aug 11, 2010 KEV Mar 25, 2022
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2021-31207	Security feature bypass in Microsoft Exchange Server (ProxyShell) enables webshell RCE	6.6	100%	KEVRansomwarePoC	May 11, 2021 KEV Nov 3, 2021
CVE-2021-34473 +1 related CVE CVE-2021-34523	SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell)	9.1 group max	100%	KEVRansomwarePoC	Jul 14, 2021 KEV Nov 3, 2021

From the original article

2 min read at infosecurity-magazine.com

The US authorities have released new details of the long-running “Ghost” ransomware group originating in China, claiming it has compromised victim organizations in over 70 countries.

Infosecurity Magazine

By Phil Muncaster · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.