Announcement

AhsayCBS flaws exploited to deploy webshells and cryptominers; hotfixes released

Huntress says AhsayCBS 10.3.4 is affected, and Ahsay released hotfixes for v10 and v7–v9 on October 12.

20d agofirst seen 20d ago

Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer | Huntress

TLDR

Huntress reports attackers chained two AhsayCBS flaws to bypass authentication, execute code and deploy webshells and XMRig miners disguised as Microsoft Edge. It had seen five organizations targeted by October 8. Ahsay released hotfixes on October 12: 10.3.4.45 for v10, including 10.3.4.0, and 9.15.2.70 for v7–v9. Huntress says it verified the v10 hotfix mitigates the attack chain’s initial entry point.

Today's Rank

—

Not ranked yet

Combined views

—

First seen 20d ago

AhsayCBS flaws exploited to deploy webshells and cryptominers; hotfixes released

TLDR

Combined views

Combined views

2 Sources

2 Sources

2 Sources

2 Sources

2 Sources

2 Sources

2 Sources

2 Sources