Citrus ransomware uses VLESS, Sn00py, and LLM-written attack scripts
Kaspersky says the new group enters via contractor VPN or RDP logins, then tries Certighost and an old print-spooler bug.
Stories per day · 30 days
2 RSS
3 stories, newest first · one card per story
Stories tagged #1c-enterprise
Feral Wolf Ransomware Attacks Exploit Atlassian Confluence and Misconfigured 1C Systems
BI.ZONE links Feral Wolf ransomware attacks on Russian firms to Confluence CVE-2023-22515 exploitation and exposed 1C clusters, deploying GenieLocker.
4
Feral Wolf Hackers Exploit Confluence and 1C to Deploy GenieLocker Ransomware
Feral Wolf exploited Atlassian Confluence and 1C:Enterprise flaws to deploy GenieLocker ransomware across Russian retail, construction, manufacturing and IT firms.
3