DreamBus Botnet Exploiting A Critical Vulnerability in Apache RocketMQ

Threat Level

Vulnerability Report

For a detailed threat advisory, download the pdf file here

Summary

A critical vulnerability (CVE-2023-33246) in Apache RocketMQ servers enables remote code execution, leading to a surge in attacks, including the deployment of the DreamBus malware. Timely system updates are crucial to defend against these threats.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.