May 4, 2023

Summary of Vulnerabilities & Threats: April 2023

Vulnerabilities ExploitedAdversaries in ActionAttacks ExecutedTop Targeted
Countries
Top Targeted
Industries
MITRE
ATT&CK TTPs
171929Netherlands
United States
Norway
Ukraine
Belgium
Government
Energy
Financial
Telecommunications
Healthcare
196

Download the pdf file to learn more

Summary

In April, the discovery of six zero-day vulnerabilities drew significant attention from the cybersecurity community. One of these vulnerabilities was exploited by Rorschach Ransomware group, leading to a heightened sense of urgency among security teams to patch their systems.

The month of April saw a rise in ransomware attacks, with various strains such as Rorschach, Money message, Blackcat, Trigona, Cylance, Nokoyawa, and LockBit actively targeting victims. As ransomware continues to evolve and grow in sophistication, organizations must take steps to protect themselves by implementing comprehensive backup and disaster recovery strategies and training employees on how to recognize and avoid phishing attacks.

Attackers are leveraging two vulnerabilities (CVE-2023-27350 and CVE-2023-27351) in PaperCut MF/NG software to install Atera remote management software. In addition to ransomware attacks, several malware families were observed targeting victims worldwide. These include Jaguar Tooth, BellaCiao, QBot, MgBot, Domino Backdoor, and Carbanak Backdoor. These malware families are designed to steal sensitive data, disrupt systems, and evade detection by security tools.

Finally, the CVE-2023-2033 vulnerability is a high-severity zero-day vulnerability that was exploited in attacks, making it the first zero-day chrome vulnerability to be exploited since the start of the year 2023.

Download the pdf file to learn more

 

Related Events

Dive into our library of resources for expert insights, guides, and in-depth analysis on maximizing Uni5 Xposure’s capabilities

Book a demo and find out more about how Hive Pro can double your operational efficiency

Book a Demo