Paradise Ransomware Distributed Through AweSun Vulnerability Exploitation

The ASEC analysis team has recently discovered the distribution of Paradise ransomware. The threat actors are suspected to be utilizing a vulnerability exploitation of the Chinese remote control program AweSun. In the past, the team also found and covered the distribution of Sliver C2 and BYOVD through a Sunlogin vulnerability, a remote control program developed in China.

1. AweSun Vulnerability Exploitation

The installation of Sliver C2 through the AweSun remote control …

analysis asec awesun byovd china chinese control distributed distribution exploitation installation malware malware analysis paradise paradise ransomware program ransomware sliver sunlogin team threat threat actors vulnerability vulnerability exploitation