Ransomwarecritical

Double-Extortion Play Ransomware Strikes 300 Organizations Worldwide

The Hacker Newsby @TheHackersNewsDec 19, 2023 · 06:41 UTC (Dec 19, 2023)3 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2022-41040 CVE-2022-41082 CVE-2018-13379 CVE-2020-12812

Tags: cve-2022-41040 cve-2022-41082 cve-2018-13379 cve-2020-12812 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-13379	Unauthenticated Path Traversal in Fortinet FortiOS SSL VPN	9.8	100%	KEVRansomware	Jun 4, 2019 KEV Nov 3, 2021
CVE-2020-12812	MFA Bypass via Username Case Change in Fortinet FortiOS SSL VPN	9.8	45%	KEVRansomware	Jul 24, 2020 KEV Nov 3, 2021
CVE-2022-41040 +1 related CVE CVE-2022-41082	Server-Side Request Forgery in Microsoft Exchange Server (ProxyNotShell)	8.8 group max	100%	KEVRansomwarePoC	Oct 3, 2022 KEV Sep 30, 2022

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  Dec 19, 2023 Ransomware / Threat Intelligence The threat actors behind the Play ransomware are estimated to have impacted approximately 300 entities as of October 2023, according to a new joint cybersecurity advisory from Australia and the U. S.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.