PaperCut vulnerabilities leveraged by Clop, LockBit ransomware affiliates

Clop and LockBit ransomware affiliates are behind the recent attacks exploiting vulnerabilities in PaperCut application servers, according to Microsoft and Trend Micro researchers. The detected campaings “Microsoft is attributing the recently reported attacks exploiting the CVE-2023-27350 and CVE-2023-27351 vulnerabilities in print management software PaperCut to deliver Clop ransomware to the threat actor tracked as Lace Tempest (overlaps with FIN11 and TA505),” Microsoft shared. “Lace Tempest (DEV-0950) is a Clop ransomware affiliate that has been observed … More →

The post …

actor affiliate application attacks clop clop ransomware cve cve-2023-27350 cve-2023-27351 cyberattack dev don't miss enterprise exploiting fin11 hot stuff lockbit lockbit ransomware management micro microsoft papercut print ransomware researchers servers software ta505 threat threat actor trend trend micro vulnerabilities