Patch or Peril: A Veeam vulnerability incident

July 12, 2024, 5:49 p.m.

Description

While the vulnerability CVE-2023-27532 was made public in March 2023 and subsequently patched by Veeam for versions 12/11a and later for Veeam Backup & Replication software, Group-IB’s Digital Forensics and Incident Response (DFIR) team recently observed a notable incident related to this vulnerability.

Date

Published Created Modified
July 12, 2024, 5:31 p.m. July 12, 2024, 5:31 p.m. July 12, 2024, 5:49 p.m.

Attack Patterns

EstateRansomware

T1018

T1571

T1087

T1555

T1505

T1021

T1486

T1070

T1203

T1569

T1204

T1049

T1027

T1053

T1562

T1133

T1078