Cring Ransomware Continues Assault On Industrial Companies

Share post:

The Cring ransomware has continued to attack organizations with aging ColdFusion servers and VPNs.

According to Sophos researchers, the group that uses Cring ransomware consists of the same hackers in Belarus and Ukraine who use automated tools to break into servers of an unnamed company in the service sector.

The Sophos researchers went on to explain how the ransomware gang operated by exploiting a vulnerability in an 11-year-old installation of Adobe ColdFusion 9 to remotely take control of a ColdFusion server.

According to Sophos, the hackers used their automated tools to scan 9,000 access routes into the company’s systems within 75 seconds and then exploited a vulnerability in the outdated Adobe program that gave them access to files from servers that were not supposed to be publicly accessible.

During the attack, the attackers were able to access timesheets and payroll entry data before cracking the Internet-facing server within minutes, after which the ransomware was successfully executed 72 hours later.

For more information, read the original story in ZDNet.

Featured Tech Jobs


Related articles

Cyber Security Today, April 12, 2024 – A warning to Sisense customers, a new tactic for spreading the Raspberry Robin worm, and more

A warning to Sisense customers, a new tactic for spreading the Raspberry Robin worm, and more. Welcome to Cyber Security Today. It’s Friday April 12th, 2024. I’m Howard Solomon. Organizations that use products from business analytics provider Sisense [SI-SENSE] are being told to reset user login credentials and digital keys. The warning comes from the

LinkedIn introduces verification for recruiters to combat scams

LinkedIn announced today the launch of a new verification process for job recruiters, a move aimed at curtailing...

Cyber Security Today, Week in Review for week ending Friday, April 5, 2024

This episode features a discussion on a highly critical report on the hacking of Microsoft Exchange Online email accounts, a case study of a ransomware attack and the discovery of a years-long infiltration of an open source group to insert a backdoor

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways