Qilin Ransomware Analysis: Critical TTPs and Defense

picussecurity.com · Undated · Licence: not cleared; local research copy only

CVEs this report names

1 CVE

CVE-2023-27532Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
Veeam · Backup & ReplicationKEVRansomwarePublic exploitHigh · 7.5T1133External Remote Services T1059.003Windows Command Shell+4 more · 1 report
80.6%Top 0.38%
82.0priority

Exploited CVE: CVE-2023-27532

A pertinent example is the exploitation of the CVE-2023-27532 vulnerability in Veeam Backup & Replication software.

There are publicly available proofs of concept that demonstrate how to exploit CVE-2023-27532 to gain access to the backup server.

A Publicly Known Proof of Concept for CVE-2023-27532

None

No passage in this report has been tied to an ATT&CK technique.