Ransomwarecritical

CISA: Hive ransomware has netted more than $100 million from over 1,300 victims

The RecordJan 9, 2023 · 00:00 UTC (Jan 9, 2023)2 min read3 · 1 read

Read at therecord.media

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-12812 CVE-2021-31207 CVE-2021-34473 CVE-2021-34523

Tags: cve-2020-12812 cve-2021-31207 cve-2021-34473 cve-2021-34523 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-12812	MFA Bypass via Username Case Change in Fortinet FortiOS SSL VPN	9.8	45%	KEVRansomware	Jul 24, 2020 KEV Nov 3, 2021
CVE-2021-31207	Security feature bypass in Microsoft Exchange Server (ProxyShell) enables webshell RCE	6.6	100%	KEVRansomwarePoC	May 11, 2021 KEV Nov 3, 2021
CVE-2021-34473 +1 related CVE CVE-2021-34523	SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell)	9.1 group max	100%	KEVRansomwarePoC	Jul 14, 2021 KEV Nov 3, 2021

From the original article

2 min read at therecord.media

The Hive ransomware group has brought in more than $100 million from attacks on more than 1,300 companies worldwide from June 2021 to November 2022, according to a new joint report from several U. S. agencies.

The Record

therecord.media

Read the full article at The Record

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.