Early backdoor implantation leveraged by Lorenz ransomware

BleepingComputer reports that the Lorenz ransomware operation exploited a critical Mitel telephony infrastructure vulnerability, tracked as CVE-2022-29499, to obtain initial access to the victim's network five months prior to commencing lateral movement, data theft, and system encryption activities.

access backdoor bleepingcomputer critical cve cve-2022-29499 cybercrime data data theft encryption exploited infrastructure initial access lateral movement lorenz lorenz ransomware malware mitel network ransomware reports system telephony theft victim vulnerability