Malwarehigh

Fileless SockDetour backdoor targets U.S.

Security Affairsby @securityaffairsFeb 26, 2022 · 18:44 UTC (Feb 26, 2022)2 min read3 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-40539 CVE-2021-44077

Tags: cve-2021-40539 cve-2021-44077 malware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-40539	Unauthenticated RCE via REST API auth bypass in Zoho ManageEngine ADSelfService Plus	9.8	99%	KEVRansomwarePoC	Sep 7, 2021 KEV Nov 3, 2021
CVE-2021-44077	Unauthenticated RCE in Zoho ManageEngine ServiceDesk Plus and SupportCenter Plus	9.8	93%	KEVPoC	Nov 29, 2021 KEV Dec 1, 2021

From the original article

2 min read at securityaffairs.com

Researchers provided details about a stealthy custom malware dubbed SockDetour that targeted U. S. -based defense contractors.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.