Hackers Deploy "SUBMARINE" Backdoor in Barracuda Email Security Gateway Attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday disclosed details of a "novel persistent backdoor" called SUBMARINE deployed by threat actors in connection with the hack on Barracuda Email Security Gateway (ESG) appliances.
"SUBMARINE comprises multiple artifacts — including a SQL trigger, shell scripts, and a loaded library for a Linux daemon — that together enable

agency artifacts attacks backdoor barracuda called cisa cybersecurity deploy email email security email security gateway esg gateway hack hackers infrastructure infrastructure security library novel persistent scripts security security gateway shell sql submarine threat threat actors trigger