Ransomwarecritical

RansomHub Ransomware Group Targets 210 Victims Across Critical Sectors

The Hacker Newsby @TheHackersNewsSep 3, 2024 · 12:52 UTC (Sep 3, 2024)3 min read3 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-46604 CVE-2023-22515 CVE-2023-3519 CVE-2023-46747 CVE-2023-27997 CVE-2023-48788

Tags: cve-2023-46604 cve-2023-22515 cve-2023-3519 cve-2023-46747 cve-2023-27997 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-22515	Unauthenticated Broken Access Control in Atlassian Confluence Data Center/Server	9.8	99%	KEVRansomwarePoC	Oct 4, 2023 KEV Oct 5, 2023
CVE-2023-27997	Pre-Auth Heap Buffer Overflow RCE in Fortinet FortiOS/FortiProxy SSL-VPN	9.8	86%	KEVRansomware	Jun 13, 2023 KEV Jun 13, 2023
CVE-2023-3519	Unauthenticated RCE in Citrix NetScaler ADC and NetScaler Gateway	9.8	100%	KEVRansomwarePoC	Jul 19, 2023 KEV Jul 19, 2023
CVE-2023-46604	Unauthenticated RCE in Apache ActiveMQ via OpenWire Deserialization	9.8	100%	KEVRansomwarePoC	Oct 27, 2023 KEV Nov 2, 2023
CVE-2023-46747	F5 BIG-IP TMUI Authentication Bypass Enables Unauthenticated RCE	9.8	97%	KEVRansomwarePoC ×2	Oct 26, 2023 KEV Oct 31, 2023
CVE-2023-48788	Unauthenticated SQL Injection in Fortinet FortiClient EMS	9.8	98%	KEVRansomware	Mar 12, 2024 KEV Mar 25, 2024

From the original article

3 min read at thehackernews.com

Threat actors linked to the RansomHub ransomware group encrypted and exfiltrated data from at least 210 victims since its inception in February 2024, the U. S. government said.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.