Tag: SimpleHelp
-
Microsoft Security Blog: Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability
Source URL: https://www.microsoft.com/en-us/security/blog/2025/10/06/investigating-active-exploitation-of-cve-2025-10035-goanywhere-managed-file-transfer-vulnerability/ Source: Microsoft Security Blog Title: Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability Feedly Summary: Storm-1175, a financially motivated actor known for deploying Medusa ransomware and exploiting public-facing applications for initial access, was observed exploiting the deserialization vulnerability in GoAnywhere MFT’s License Servlet, tracked as CVE-2025-10035. We are publishing this…
-
The Register: Ransomware scum disrupted utility services with SimpleHelp attacks
Source URL: https://www.theregister.com/2025/06/12/cisa_simplehelp_flaw_exploit_warning/ Source: The Register Title: Ransomware scum disrupted utility services with SimpleHelp attacks Feedly Summary: Good news: The vendor patched the flaw in January. Bad news: Not everyone got the memo Ransomware criminals infected a utility billing software providers’ customers, and in some cases disrupted services, after exploiting unpatched versions of SimpleHelp’s remote…
-
The Register: Play ransomware crims exploit SimpleHelp flaw in double-extortion schemes
Source URL: https://www.theregister.com/2025/06/04/play_ransomware_infects_900_victims/ Source: The Register Title: Play ransomware crims exploit SimpleHelp flaw in double-extortion schemes Feedly Summary: Recompiled binaries and phone threats used to boost the pressure Groups linked with the Play ransomware have exploited more than 900 organizations, the FBI said Wednesday, and have developed a number of new techniques in their double-extortion…
-
The Register: DragonForce double-whammy: First hit an MSP, then use RMM software to push ransomware
Source URL: https://www.theregister.com/2025/05/28/dragonforce_ransomware_gang_sets_fire/ Source: The Register Title: DragonForce double-whammy: First hit an MSP, then use RMM software to push ransomware Feedly Summary: SimpleHelp was the vector for the attack DragonForce ransomware infected a managed service provider, and its customers, after attackers exploited security flaws in remote monitoring and management tool SimpleHelp.… AI Summary and Description:…