Skip to content
NewA calmer, faster ZeroHour
Ransomwarecritical

Veeam Backup & Replication exploit reused in new Frag ransomware attack

Security Affairsby @securityaffairs ()3 min read2 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2024-40711
Unauthenticated Deserialization RCE in Veeam Backup & Replication
9.890%KEVRansomwarePoC
KEV

From the original article

3 min read at securityaffairs.com

A critical flaw, tracked as CVE-2024-40711, in Veeam Backup & Replication (VBR) was also recently exploited to deploy Frag ransomware. In mid-October, Sophos researchers warned that ransomware operators are exploiting the critical vulnerability CVE-2024-40711 in Veeam Backup & Replication to create rogue accounts and deploy malware.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.