Chinese Hackers Deploying Backdoor via VMware ESXi Zero-day Since 2021

In Late 2023, UNC3886, a highly advanced Chinese nexus espionage group, was found to be exploiting VMware vCenter systems using the vulnerability CVE-2023-34048. This threat actor is known for exploiting systems that cannot install EDR (Endpoint Detection and Response) on them. There were also instances where the threat actor used zero-day vulnerabilities to infiltrate systems, […]

The post Chinese Hackers Deploying Backdoor via VMware ESXi Zero-day Since 2021 appeared first on Cyber Security News.

actor advanced backdoor chinese chinese hackers cve cve-2023-34048 cyber security detection detection and response edr endpoint endpoint detection endpoint detection and response espionage esxi exploiting found hackers install nexus response systems threat threat actor unc3886 vcenter vmware vmware esxi vmware vcenter vulnerability zero-day