Ransomwarecritical

Buhti Ransomware Gang Switches Tactics, Utilizes Leaked LockBit and Babuk Code

The Hacker Newsby @TheHackersNewsJun 7, 2023 · 08:52 UTC (Jun 7, 2023)2 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-47966 CVE-2022-47986 CVE-2023-27350

Tags: cve-2022-47966 cve-2022-47986 cve-2023-27350 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-47966	Unauthenticated SAML RCE in Zoho ManageEngine On-Premise Products	9.8	100%	KEVRansomwarePoC ×6	Jan 18, 2023 KEV Jan 23, 2023
CVE-2022-47986	YAML Deserialization RCE in IBM Aspera Faspex	9.8	100%	KEVRansomware	Feb 17, 2023 KEV Feb 21, 2023
CVE-2023-27350	Authentication Bypass Leading to SYSTEM RCE in PaperCut MF/NG	9.8	100%	KEVRansomwarePoC ×3	Apr 20, 2023 KEV Apr 21, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  May 25, 2023 Endpoint Security / Cyber Threat The threat actors behind the nascent Buhti ransomware have eschewed their custom payload in favor of leaked LockBit and Babuk ransomware families to strike Windows and Linux systems.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.