Threat actors are exploiting an unpatched Atlassian server vulnerability to deploy a Linux variant of Cerber ransomware. The attackers create an administrator account using the vulnerability and use it to install the Effluence web shell plugin and execute arbitrary commands. The primary payload of the Cerber ransomware is a loader for additional malware. Several ransomware families have been targeting Windows and VMware ESXi servers.
42 Impressions