Data breachhigh

A New APT Hacking Group Targeting Fuel, Energy, and Aviation Industries

The Hacker Newsby @TheHackersNewsOct 4, 2021 · 12:48 UTC (Oct 4, 2021)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2017-12149 CVE-2021-34473 CVE-2021-34523 CVE-2021-31207

Tags: cve-2017-12149 cve-2021-34473 cve-2021-34523 cve-2021-31207 breach

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-12149	Unauthenticated Deserialization RCE in Red Hat JBoss EAP 5.2 HTTP Invoker	9.8	91%	KEVRansomware	Oct 4, 2017 KEV Dec 10, 2021
CVE-2021-31207	Security feature bypass in Microsoft Exchange Server (ProxyShell) enables webshell RCE	6.6	100%	KEVRansomwarePoC	May 11, 2021 KEV Nov 3, 2021
CVE-2021-34473 +1 related CVE CVE-2021-34523	SSRF (CWE-918) in Microsoft Exchange Server Enabling RCE (ProxyShell)	9.1 group max	100%	KEVRansomwarePoC	Jul 14, 2021 KEV Nov 3, 2021

From the original article

2 min read at thehackernews.com

A previously undocumented threat actor has been identified as behind a string of attacks targeting fuel, energy, and aviation production industries in Russia, the U. S. , India, Nepal, Taiwan, and Japan with the goal of stealing data from compromised networks.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.