The same Beijing-backed cyber spy crew the feds say burrowed into US critical infrastructure
It looks like China's Volt Typhoon has found a new way into American networks as Versa has disclosed a nation-state backed attacker has exploited a high-severity bug affecting all of its SD-WAN customers using Versa Director., is being abused to plant custom, credential-harvesting web shells on customers' networks, according to Black Lotus Labs.
That appears to be the case with this CVE, as Versa notes the attacks target MSPs for privilege escalation. Versa has since released a patch, and encourages all customers to upgrade to Versa Director version 22.1.4 or later and apply the hardening guidelines. But the advice comes too late for some, as we're's questions about the scope of the attacks, and who is believed to be responsible for the exploits.
After gaining access to the victims' networks via the exposed Versa management port, the attackers deployed the VersaMem web shell, which steals credentials and then allows Volt Typhoon to access the service providers' customers' networks as authenticated users. Britton works with critical infrastructure CISOs to protect against this particular government-backed crew, and said this new attack"fits with their established MO of targeting edge systems to then move inbound for living off the land."
United Kingdom Latest News, United Kingdom Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Manchester Pride 2024: Friday stage times and line-up with Jessie J and Gok WanHere's all the stage times and line-up for the first night of Manchester Pride 2024 on August 23
Read more »
Wan-Bissaka explains transfer to West Ham from UnitedAaron Wan-Bissaka's time at Man Utd has come to an end, with the defender sealing a move to West Ham.
Read more »
Aaron Wan-Bissaka: West Ham sign Manchester United defender for £15mAaron Wan-Bissaka completes a £15m move to West Ham from Manchester United.
Read more »
Aaron Wan-Bissaka: West Ham sign Manchester United defender for £15mAaron Wan-Bissaka completes a £15m move to West Ham from Manchester United.
Read more »
Aaron Wan-Bissaka: West Ham sign Man Utd defender on seven-year dealWest Ham have completed the signing of defender Aaron Wan-Bissaka from Manchester United.
Read more »
Evacuation Ordered in Northern Japan, Flights and Trains Canceled in Tokyo as Typhoon ApproachesThousands in northern Japan were ordered to evacuate Friday because of the risk of flooding and mudslides from a typhoon approaching.
Read more »