Kaspersky reported how recent attacks against a series of European industrial networks were accomplished at a vulnerability in Fortinet’s FortiGate VPN. (Alexxsun/CC BY-SA 4.0)
In the early months of 2021, cybercriminals believed to be manually delivering Cring ransomware, struck a series of European industrial networks. Kaspersky is the first to report how those attacks were accomplished: a vulnerability in Fortinet’s FortiGate VPN.
According to Kaspersky, one client’s infection was severe enough to cause a “temporary shutdown of the industrial process due to servers used to control the industrial process becoming encrypted.”
The ransomware operators used a FortiOS vulnerability originally patched in 2019, CVE-2018-13379, which allows an attacker to access the username and password in cleartext. The operators scanned systems for vulnerable installations a few days prior to breaching the system, though it is unclear if that was how they initially discovered targets. K
Kaspersky
Power-shell
காஸ்பர்ஸ்கி
பவர்-ஷெல்
on page 4 of the report, they said here the intelligence services that were responsible or operating in this apt 28, 29 that we heard so much out of. they took black emergency, the malware package. it s not an intelligence service. power shell, a tactic, not an intelligence service. so when i looked at that, i said they re inflating things together. 398 words is not a compelling case to kick people out of the country. not saying they re not involved. it s not compelling. so why would our intelligence agencies make these public-type statements saying that the russians hacked the dnc, the russians are responsible for the hacking? why would they be doing that? seems irresponsible. well, look, if they have other information not being disclosed, that s the trap that was talking about. russia is good about deny, deny, force our hand that people say do you have any proof or not. we disclose sensitive information, sources and methods, country that have
Report
Intelligence-services
Intelligence-service
Emergency
Operating
Page
Malware-package
29
4
28
People
Things