Ransomwarehigh

Hackers Exploiting SimpleHelp RMM Flaws for Persistent Access and Ransomware

The Hacker Newsby @TheHackersNewsFeb 7, 2025 · 05:20 UTC (Feb 7, 2025)3 min read3

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-57726 CVE-2024-57727 CVE-2024-57728

Tags: cve-2024-57726 cve-2024-57727 cve-2024-57728 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-57726 +2 related CVEs CVE-2024-57727 CVE-2024-57728	Missing-Authorization Privilege Escalation in SimpleHelp Remote Support <= 5.5.7	9.9 group max	66%	KEVRansomware	Jan 15, 2025 KEV Apr 24, 2026

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Feb 07, 2025 Vulnerability / Threat Intelligence Threat actors have been observed exploiting recently disclosed security flaws in SimpleHelp's Remote Monitoring and Management (RMM) software as a precursor for what appears to be a ransomware attack.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.