Attackers use AhsayCBS vulnerabilities to install cryptocurrency miners

Two unpatched vulnerabilities in the backup management platform are being exploited to deploy web shells and cryptocurrency miners. The flaws allow authentication bypass and operating system command injection, according to SecurityWeek. BleepingComputer reports that one vulnerability is rated critical and the other is rated medium severity.

• The Hacker News identifies the cryptocurrency mining software as XMRig.

Covered by 3 publishers within 7 hours of the first report.

• The Hacker News: Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge
• Latest 1:17 PM ET BleepingComputer: Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto

Reporting3

SW SecurityWeek Unpatched AhsayCBS Vulnerabilities Exploited in the Wild · Ionut Arghire 6:23 AM

THN The Hacker News Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge · info@thehackernews.com (The Hacker News) 8:47 AM

BC BleepingComputer Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto · Bill Toulas 1:17 PM

Related

BC Nikkei says attackers breached employee email accounts October 5

9M iVerify identifies P7 DarkSword spyware targeting unpatched iPhones October 8

BC Microsoft plans Teams integrations to detect deepfake meeting media October 8

THN Researchers identify 16 Firefox extensions targeting crypto wallet secrets October 8

Topics MicrosoftCrypto