Malwarehigh
China-linked hackers target governments and more in Southeast Asia with new backdoors
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-21587 | Unauthenticated Arbitrary File Upload in Oracle E-Business Suite | 9.8 | 98% | KEVRansomwarePoC | KEV |
| CVE-2023-32315 | Unauthenticated Path Traversal in Ignite Realtime Openfire Admin Console | 7.5 | 100% | KEVPoC ×2 | KEV |
From the original article
3 min read at therecord.media
A China-linked espionage group has been observed targeting government agencies, educational institutions and the communications industry with two custom backdoors, according to the new research. Since early 2022, the group — labeled Earth Krahang by researchers — has attacked at least 70 victims across 23 countries, with the primary focus on Southeast Asia.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.