UNC4466 Attack Campaign Targets Veritas Backup Exec and Deploys ALPHV Ransomware

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

UNC4466 conducted an attack campaign in late 2022, gaining initial access to an internet-exposed Windows server running Veritas Backup Exec and deploying the ALPHV ransomware, with over 8,500 potentially vulnerable IP addresses identified.

To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.