Jun 20, 2023, 10:02 PM
http://www.ctfiot.com/120876.html
TL;DR (joking, read it, interesting stuff inside)
Barracuda ESG was affected by a zero-day vulnerability, CVE-2023-2868. This vulnerability was exploited suposedly by UNC4841, that has links to China and has been conducting espionage campaigns since October 2022 against various sectors and regions.
UNC4841 sent emails with malicious attachments to take advantage of the vulnerability and compromise Barracuda ESG. The Barracuda team detected the issue and released patches to resolve it, but the attackers continued to cause problems.
The victims of these attackers include government agencies, public and private sectors worldwide. Mandiant, warns that these attackers are likely to persist
TL;DR (joking, read it, interesting stuff inside)
Barracuda ESG was affected by a zero-day vulnerability, CVE-2023-2868. This vulnerability was exploited suposedly by UNC4841, that has links to China and has been conducting espionage campaigns since October 2022 against various sectors and regions.
UNC4841 sent emails with malicious attachments to take advantage of the vulnerability and compromise Barracuda ESG. The Barracuda team detected the issue and released patches to resolve it, but the attackers continued to cause problems.
The victims of these attackers include government agencies, public and private sectors worldwide. Mandiant, warns that these attackers are likely to persist
