Ransomwarehigh
Play ransomware group hit 900 organizations since 2022
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-57727 | Unauthenticated Path Traversal File Download in SimpleHelp 5.5.7 and Earlier | 7.5 | 97% | KEVRansomware | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | gmx.de | ion model. Victims are instructed to contact the group via @gmx[.]de or @web[.]de email addresses and pay the ransom in crypto |
| domain | web.de | ctims are instructed to contact the group via @gmx[.]de or @web[.]de email addresses and pay the ransom in cryptocurrency. If |
From the original article
2 min read at securityaffairs.com
A joint advisory from the US and Australian authorities states that Play ransomware has hit approximately 900 organizations over the past three years.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.