Ransomwarehigh
FIN7 Cybercrime Syndicate Emerges as a Major Player in Ransomware Landscape
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-0688 | RCE in Microsoft Exchange Server from Shared Install-Time Validation Keys | 8.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2021-42321 | Authenticated RCE via Insecure Deserialization in Microsoft Exchange Server | 8.8 | 92% | KEVRansomwarePoC ×2 | KEV |
From the original article
3 min read at thehackernews.com
An exhaustive analysis of FIN7 has unmasked the cybercrime syndicate's organizational hierarchy, alongside unraveling its role as an affiliate for mounting ransomware attacks. It has also exposed deeper associations between the group and the larger threat ecosystem comprising the now-defunct ransomware DarkSide , REvil , and LockBit families.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.