Shulou(Shulou.com)11/24 Report--

CTOnews.com October 24 news, security company Sophos recently issued a press release, claiming that hackers locked the old version of Adobe ColdFusion software, through vulnerabilities to launch attacks.

▲ image source SophosCTOnews.com learned from the report that the hacker organization BlackDogs carried out the relevant attacks from September to early October this year, locking the "EOL" ColdFusion 11, exploiting the vulnerability into the victim's device, and then deploying ransomware based on LockBit 3.0, but this behavior was intercepted by the company's protection system.

▲ Touyuan Sophos Security claims that many hackers are exploiting vulnerabilities in old software to spread blackmail software, as well as a recent attack against the CVE-2023-40044 vulnerability, which was exploited by the hacker organization Reichsadler to invade victims and use the open source tool GodPotato to upgrade its privileges to NT AUTHORITY\ SYSTEM in an attempt to demand virtual currency based on the ransomware generated by LockBit 3.0.

In this regard, Sophos said that users should actively update the software on their computers to avoid the end of the life cycle of the old version of the software and hackers.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.