Exploitation of Confluence Server Vulnerability CVE-2023-22527 Leading to C3RB3R Ransomware

Key Takeaways Arctic Wolf Labs has observed CVE-2023-22527 being exploited to deploy C3RB3R ransomware. Several threat actors are exploiting CVE-2023-22527 to deploy payloads for cryptocurrency mining and remote access trojans. Background On January 4, 2024, Atlassian disclosed CVE-2023-22527, a template injection vulnerability affecting Confluence Data Center and Server versions 8.0.0 to 8.5.3. The vulnerability allows … Exploitation of Confluence Server Vulnerability CVE-2023-22527 Leading to C3RB3R Ransomware

Article Link: Exploitation of Confluence Server Vulnerability CVE-2023-22527 Leading to C3RB3R Ransomware - Arctic …

access arctic arctic wolf atlassian center confluence confluence data center confluence server cryptocurrency cryptocurrency mining cve data data center deploy exploitation exploited exploiting injection january key labs mining payloads ransomware remote access remote access trojans server takeaways template template injection threat threat actors trojans vulnerability wolf