Announcement
AhsayCBS flaws exploited to deploy webshells and cryptominers; hotfixes released
Huntress says AhsayCBS 10.3.4 is affected, and Ahsay released hotfixes for v10 and v7–v9 on October 12.
TLDR
Huntress reports attackers chained two AhsayCBS flaws to bypass authentication, execute code and deploy webshells and XMRig miners disguised as Microsoft Edge. It had seen five organizations targeted by October 8. Ahsay released hotfixes on October 12: 10.3.4.45 for v10, including 10.3.4.0, and 9.15.2.70 for v7–v9. Huntress says it verified the v10 hotfix mitigates the attack chain’s initial entry point.
Combined views
—
First seen ago
— likes— comments— saves— reposts