[New post] (Ex)Change Of Pace: UNC2596 Observed Leveraging Vulnerabilities To Deploy Cuba Ransomware

Malware Devil posted: "In 2021, Mandiant observed some threat actors deploying ransomware increasingly shift to exploiting vulnerabilities as an initial infection vector. UNC2596, a threat actor that deploys COLDDRAW ransomware, publicly known as Cuba Ransomware, exemplifies th" Malware Devil (Ex)Change Of Pace: UNC2596 Observed Leveraging Vulnerabilities To Deploy Cuba Ransomware Malware Devil Feb 23 In 2021, Mandiant observed some threat actors deploying ransomware increasingly shift to exploiting vulnerabilities as an initial infection vector. UNC2596, a threat actor that deploys COLDDRAW ransomware, publicly known as Cuba Ransomware, exemplifies this trend. While public reporting has highlighted CHANITOR campaigns as precursor for these ransomware incidents, Mandiant has also identified the exploitation of Microsoft Exchange vulnerabilities, including ProxyShell and ProxyLogon, as another access point leveraged by UNC2596 likely as early as August 2021. The content of this blog focuses Manage your email settings or unsubscribe. Trouble clicking? Copy and paste this URL into your browser: https://devi.ly/exchange-of-pace-unc2596-observed-leveraging-vulnerabilities-to-deploy-cuba-ransomware/

Get the Jetpack app to use Reader anywhere, anytime Follow your favorite sites, save posts to read later, and get real-time notifications for likes and comments. Automattic, Inc. - 60 29th St. #343, San Francisco, CA 94110