Hackers turn business backup servers into crypto mines after sneaking malware disguised as Microsoft Edge
- Attackers exploited critical AhsayCBS backup software flaws to compromise organizations’ backup servers
- Intrusions deployed webshells and disguised XMRig cryptominers for persistence and stealth
- Researchers urge immediate patching, restricted access, and full system reimaging if compromised
In a particularly brazen hack, threat actors were seen targeting the servers that businesses use as backups in case of a cyberattack.
The vulnerabilities used in this attack have since been mitigated, but since the attack is currently ongoing, organizations using this particular backup method are urged to apply the fixes immediately and secure their premises.
AhsayCBS backup utility
At the core of this incident is a backup utility called Ahsay Cloud Backup Suite (or AhsayCBS), a server-based backup management platform developed by a company of the same name, based in Hong Kong.
Businesses, managed service providers (MSP), and IT admins use it to manage backups for their devices and clients across a range of...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
