Ransomwarehigh

ALPHV/BlackCat ransomware affiliate targets Veritas Backup solution bugs

Security Affairsby @securityaffairsApr 4, 2023 · 20:41 UTC (Apr 4, 2023)3 min read3 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-27876 CVE-2021-27877 CVE-2021-27878

Tags: cve-2021-27876 cve-2021-27877 cve-2021-27878 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-27877 +2 related CVEs CVE-2021-27878 CVE-2021-27876	Unauthenticated RCE in Veritas Backup Exec Agent via Legacy SHA Authentication	9.8 group max	65%	KEVRansomwarePoC	Mar 1, 2021 KEV Apr 7, 2023

From the original article

3 min read at securityaffairs.com

An ALPHV/BlackCat ransomware affiliate was spotted exploiting vulnerabilities in the Veritas Backup solution. An affiliate of the ALPHV/BlackCat ransomware gang, tracked as UNC4466, was observed exploiting three vulnerabilities in the Veritas Backup solution to gain initial access to the target network.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.