Patch or Peril: A Veeam vulnerability incident
Essential information
- Published
- 12/07/2024 17:31
- Modified
- 12/07/2024 17:49
- Tags
- 2024-07-12 CVE-2023-27532 adfind backdoor fortigate netscan ransomware svhost veeam vpn
- Related entities
- 2 observables, 1 intrusion sets (apt), 17 techniques (mitre)
Description
While the vulnerability CVE-2023-27532 was made public in March 2023 and subsequently patched by Veeam for versions 12/11a and later for Veeam Backup & Replication software, Group-IB’s Digital Forensics and Incident Response (DFIR) team recently observed a notable incident related to this vulnerability.