Ransomware Threats Exploit CVE-2023-46604 in Apache ActiveMQ Servers

Threat Level

Vulnerability Report

For a detailed threat advisory, download the pdf file here

Summary

Ransomware groups and SparkRAT exploiting a critical vulnerability (CVE-2023-46604) in Apache ActiveMQ, despite a security update on October 27, 2023, affecting systems with outdated ActiveMQ versions. Promptly updating ActiveMQ versions is crucial to mitigate this vulnerability.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.