Hackers exploits bug firewall fortinet to plant ransomware

The security researchers have reached the hacker associated with the famous gangs by using Forter firewall’s vulnerability vulnerability to attach ransomware on some company networks. In the report published last week, researchers of Forescout said that a group tracked “mora_001” exploiting Fortin Firehemer, who seated a custom ransomware called “superblack.” One of the vulnerations, tracked as CVE-2024-55591, has been exploited in Cyberatty to violate the company’s network of 2024. Forter drops patch for both bugs in January. Sai Molige, Senior Manager of deployment hunting in the forest, telling tech tech, “investigating three events in companies that differ in other companies.” In one intrusion, Alescout is confirmed to say that the attacker attack “selective” encryption file server containing sensitive data. “Encryption begins only after data exfitation, and agreed to trend between ransomware operators whose data priority stole data,” Molige said. Forescout says actor mora_001 “sharing different operations,” Suddenly a back-up of the malware, when this connection is used by the lockbit. “This connection can show that the Mora_001 is the current affiliation With an operational method or communication that can be displayed, “Stefan Hostelettee’s threats in the form of CVE-2024-55591, the remarks of the ransom used in the other group, such as the current ransomware. Fortinets do not respond to techcrunch questions.

Source link