Ransomwarehigh

Ransomware Gangs Exploit Unpatched SimpleHelp Flaws to Target Victims with Double Extortion

The Hacker Newsby @TheHackersNewsJun 15, 2025 · 00:00 UTC (Jun 15, 2025)5 min read5

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-57727 CVE-2024-57728 CVE-2024-57726

Tags: cve-2024-57727 cve-2024-57728 cve-2024-57726 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-57726 +2 related CVEs CVE-2024-57727 CVE-2024-57728	Missing-Authorization Privilege Escalation in SimpleHelp Remote Support <= 5.5.7	9.9 group max	66%	KEVRansomware	Jan 15, 2025 KEV Apr 24, 2026

From the original article

5 min read at thehackernews.com

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday disclosed that ransomware actors are targeting unpatched SimpleHelp Remote Monitoring and Management (RMM) instances to compromise customers of an unnamed utility billing software provider.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.