Ransomwarehigh

Buhti ransomware op uses rebranded LockBit and Babuk payloads

Security Affairsby @securityaffairsMay 27, 2023 · 10:56 UTC (May 27, 2023)2 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-27350 CVE-2022-47986

Tags: cve-2023-27350 cve-2022-47986 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-47986	YAML Deserialization RCE in IBM Aspera Faspex	9.8	100%	KEVRansomware	Feb 17, 2023 KEV Feb 21, 2023
CVE-2023-27350	Authentication Bypass Leading to SYSTEM RCE in PaperCut MF/NG	9.8	100%	KEVRansomwarePoC ×3	Apr 20, 2023 KEV Apr 21, 2023

From the original article

2 min read at securityaffairs.com

The recently identified Buhti operation targets organizations worldwide with rebranded LockBit and Babuk ransomware variants. Researchers from Symantec discovered a new ransomware operation called Buhti (aka Blacktail ) that is using LockBit and Babuk variants to target Linux and Windows systems worldwide.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.