Hackers use in-house Zoho ServiceDesk exploit to drop webshells

[[correlate]]

Content source

https://www.bleepingcomputer.com/news/security/hackers-use-in-house-zoho-servicedesk-exploit-to-drop-webshells/

An advanced persistent threat (APT) group that had been exploiting a flaw in the Zoho ManageEngine ADSelfService Plus software has pivoted to leveraging a different vulnerability in another Zoho product.

The actor has been seen exploiting an unauthenticated remote code execution issue in Zoho ServiceDesk Plus versions 11305 and older, currently tracked as CVE-2021-44077.

Hackers use in-house Zoho ServiceDesk exploit to drop webshells

An advanced persistent threat (APT) group that had been exploiting a flaw in the Zoho ManageEngine ADSelfService Plus software has pivoted to leveraging a different vulnerability in another Zoho product.

www.bleepingcomputer.com

 

[LASER_oneXM]

FBI warning: Hackers are targeting this flaw in Zoho ManageEngine ServiceDesk Plus

Attackers are using flaw to install persistent backdoors

www.zdnet.com