Chinese Espionage Hackers Exploit ESXi Zero-Day

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

The Chinese-sponsored hacking group, UNC3886, has been actively exploiting the CVE-2023-20867 vulnerability and using advanced backdoors such as VirtualPita and VirtualPie to carry out malicious activities across organizations in the US and APJ regions.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.