TA505 exploits SolarWinds Serv-U vulnerability (CVE-2021-35211) for initial access

This article has been indexed from Fox-IT International blog

NCC Group’s global Cyber Incident Response Team have observed an increase in Clop ransomware victims in the past weeks. The surge can be traced back to a vulnerability in SolarWinds Serv-U that is being abused by the TA505 threat actor. TA505 is a known cybercrime threat actor, who is known for extortion attacks using the … Continue reading TA505 exploits SolarWinds Serv-U vulnerability (CVE-2021-35211) for initial access

Read the original article: TA505 exploits SolarWinds Serv-U vulnerability (CVE-2021-35211) for initial access