Microsoft Warns of GALLIUM Threat Group Attacking Global Telcos


Level 16
May 4, 2019
The Microsoft Threat Intelligence Center (MSTIC) today published an alert about ongoing attacks directed at telecommunication providers from around the world and operated by a threat group tracked by Microsoft as GALLIUM.
"GALLIUM is one of many ActivityGroups we see targeting telcos through SE Asia + Europe + Africa," according to one MSTIC analyst.
The hacking group exploits unpatched vulnerabilities to compromise Internet-exposed systems running WildFly/JBoss application servers.