Attacks, Vulnerabilities and Actors 15 to 21 July 2024

For a detailed threat digest, download the pdf file here

Summary

HiveForce Labs recently made several significant discoveries in the realm of
cybersecurity threats. In the past week alone, a total of five attacks were executed, four vulnerabilities were uncovered, and three active adversaries were identified. These findings underscore the persistent danger of cyberattacks.

Additionally, HiveForce Labs has identified a cyber threat actor known as Void Banshee exploiting the CVE-2024-38112 vulnerability by manipulating the MHTML protocol handler to deceive Windows users into executing remote code. The APT group Void Banshee utilizes this flaw to deploy the Atlantida stealer, which is designed to exfiltrate sensitive information and achieve financial gain.

Furthermore, EstateRansomware a newly identified ransomware group exploiting the CVE-2023-27532 vulnerability in Veeam Backup & Replication software to deploy file-encrypting malware and extort payments. The attack gains initial access to the target environment by brute-forcing a dormant account on a Fortinet FortiGate VPN appliance. These rising attacks present a significant and immediate threat to users globally.

Subscribe to receive our weekly threat digests and newsletters directly in your inbox.