DreamBus Malware Exploits Unpatched RocketMQ Servers

Threat actors exploit a known remote code vulnerability in RocketMQ servers to infect devices with DreamBus malware. CVE-2023-33246 was discovered in May 2023 and received a 9.8 score, which labels it as critical. It is a permission verification issue that impacts RocketMQ version 5.1.0 and older, allowing attackers to perform remote code execution under certain […]

The post DreamBus Malware Exploits Unpatched RocketMQ Servers appeared first on Heimdal Security Blog.