Ransomwarehigh

New BlackCat Ransomware Variant Adopts Advanced Impacket and RemCom Tools

The Hacker Newsby @TheHackersNewsAug 21, 2023 · 03:44 UTC (Aug 21, 2023)4 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-1472 CVE-2023-27532

Tags: cve-2020-1472 cve-2023-27532 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-1472	Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers	5.5	99%	KEVRansomwarePoC	Aug 17, 2020 KEV Nov 3, 2021
CVE-2023-27532	Missing Authentication in Veeam Backup & Replication Exposes Stored Credentials	7.5	81%	KEVRansomware	Mar 10, 2023 KEV Aug 22, 2023

From the original article

4 min read at thehackernews.com

Microsoft on Thursday disclosed that it found a new version of the BlackCat ransomware (aka ALPHV and Noberus) that embeds tools like Impacket and RemCom to facilitate lateral movement and remote code execution.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.