Ransomwarehigh

HelloKitty ransomware gang also targets victims with DDoS attacks

Security Affairsby @securityaffairsNov 1, 2021 · 18:47 UTC (Nov 1, 2021)2 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-20016 CVE-2021-20021 CVE-2021-20022 CVE-2021-2002

Tags: cve-2021-20016 cve-2021-20021 cve-2021-20022 cve-2021-2002 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-20016	Unauthenticated SQL Injection in SonicWall SMA100 SSL VPN	9.8	40%	KEVRansomware	Feb 4, 2021 KEV Nov 3, 2021
CVE-2021-2002	Vulnerability in the MySQL Server product of Oracle MySQL (component	4.9	3%		Jan 20, 2021
CVE-2021-20021 +1 related CVE CVE-2021-20022	Improper Privilege Management in SonicWall Email Security 10.0.9.x Grants Admin Access	9.8 group max	89%	KEVRansomware	Apr 9, 2021 KEV Nov 3, 2021

From the original article

2 min read at securityaffairs.com

The US FBI has published a flash alert warning private organizations of the evolution of the HelloKitty ransomware (aka FiveHands). The U. S.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.