Ransomwarehigh
DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer Endpoints
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-57726+2 related CVEs | Missing-Authorization Privilege Escalation in SimpleHelp Remote Support <= 5.5.7 | 9.9 group max | 66% | KEVRansomware | KEV |
From the original article
4 min read at thehackernews.com
The threat actors behind the DragonForce ransomware gained access to an unnamed Managed Service Provider's (MSP) SimpleHelp remote monitoring and management (RMM) tool, and then leveraged it to exfiltrate data and drop the locker on multiple endpoints.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.