Threat actorcritical

Chinese APT41 Hackers Broke into at Least 6 U.S. State Governments: Mandiant

The Hacker Newsby @TheHackersNewsMar 15, 2022 · 00:00 UTC (Mar 15, 2022)3 min read4 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-44207 CVE-2021-44228

Tags: cve-2021-44207 cve-2021-44228 threat-actor

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-44207	Hard-Coded Credentials in Acclaim Systems USAHERDS (through 7.4.0.1)	8.1	17%	KEV	Dec 21, 2021 KEV Dec 23, 2024
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021

From the original article

3 min read at thehackernews.com

APT41, the state-sponsored threat actor affiliated with China, breached at least six U. S. state government networks between May 2021 and February 2022 by retooling its attack vectors to take advantage of vulnerable internet-facing web applications.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.