Cuba Ransomware Targets U.S. with Veeam Exploit

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

The Cuba ransomware has targeted attacks on critical infrastructure organizations in the United States and IT enterprises across Latin America. In order to acquire credentials, it employs a blend of old and contemporary tools and leverages CVE-2023-27532 to extract credentials.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.