FIN7-Affiliated Hackers Exploit Flaws in Veeam Backup Servers

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

Publicly accessible servers using Veeam Backup & Replication (VBR) software were attacked, likely through a recently fixed vulnerability (CVE-2023-27532), by a group with similarities to the FIN7 activity group. 

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.