Researchers Detail New Backdoors Used in Barracuda ESG Attacks

Researchers have detailed new malware families used in previously disclosed attacks exploiting a vulnerability in Barracuda Email Security Gateway (ESG) appliances, and said that a “limited number” of victims remain at risk.

Barracuda in June urged some customers to replace their ESG appliances after initially deploying a series of patches for the remote code execution bug (CVE-2023-2868) in May. Also in June, Mandiant researchers, who partnered with Barracuda for incident response, said that the vulnerability had been exploited in the …

attacks backdoors barracuda barracuda esg customers email email security email security gateway esg exploiting gateway june malware patches researchers risk security security gateway series vulnerability