Ransomwarehigh
Epsilon Red – more than 3.5 thousand servers are still vulnerable
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-1472 | Unauthenticated Privilege Escalation (Zerologon) in Microsoft Netlogon Domain Controllers | 5.5 | 99% | KEVRansomwarePoC | KEV |
CVE-2021-26855+1 related CVE | Unauthenticated SSRF/RCE in Microsoft Exchange Server (ProxyLogon) | 9.1 group max | 100% | KEVRansomwarePoC ×4 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| url | http://[redacted | ou have two options : 1. Chat with me : -Visit our website: hxxp://[redacted]/support/NegotiationArea/[redacted]/ -When you visit our we |
From the original article
4 min read at securityaffairs.com
CyberNews researchers analyzed the recently discovered Epsilon Red operations and found that more than 3. 5K servers are still vulnerable Several weeks later, security researchers from Sophos have discovered a new ransomware variant known as Epsilon Red. Now, we know exactly how it was carried out – and what you should do to be safe from it.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.