TeamCity Flaw Leads to Surge in Ransomware, Cryptomining, and RAT Attacks

Multiple threat actors are exploiting the recently disclosed security flaws in JetBrains TeamCity software to deploy ransomware, cryptocurrency miners, Cobalt Strike beacons, and a Golang-based remote access trojan called Spark RAT.
The attacks entail the exploitation of CVE-2024-27198 (CVSS score: 9.8) that enables an adversary to bypass authentication measures and gain administrative

access adversary attacks authentication bypass called cobalt cobalt strike cryptocurrency cryptomining cve cve-2024-27198 cvss cvss score deploy exploitation exploiting flaw flaws golang jetbrains jetbrains teamcity miners ransomware rat remote access remote access trojan score security security flaws software spark strike teamcity threat threat actors trojan