Monthly Archives: Tháng Sáu 2023

Campaign Targets India and U.S. with Remote Access Trojans

MULTI#STORM Campaign Targets India and U.S. with Remote Access Trojans

What is Remote Access Trojan (RAT)? Một Remote Access Trojan là một loại phần mềm độc hại cho phép kẻ tấn công xâm nhập và kiểm soát từ xa trên máy tính hoặc thiết bị mục tiêu mà không được phép. RAT thường được giả mạo thành các chương trình hoặc tệp tin hợp pháp […]

CVE-2023-20867 & VMSA-2023-0013: Questions & Answers

VMware ESXi Zero-Day Vulnerability Found

CVE-2023-20867 & VMSA-2023-0013: Questions & Answers Introduction On June 13, 2023, VMware released VMSA-2023-0013, aligning with Mandiant’s publication of a third post about their ongoing investigation into a state-sponsored cyberespionage group, which was initially reported in September 2022. This document is meant to address customer questions and provide additional resources specific to VMware deployments. Current […]

New VMware ESXi zero-day used by Chinese APT

VMware ESXi Zero-Day Vulnerability Found

VMware ESXi Zero-Day vulnerability found by Mandiant security researchers. An Authentication Bypass vulnerability in VMware Tools was responsibly reported to VMware. Updates are available to remediate this vulnerability in the affected VMware products. According to VMware advisory, the Chinese Espionage actors use to perform privileged Guest Operations on Compromised Hypervisors. What is VMware ESXi? VMware ESXi effectively partitions […]