Threat Actors Target Apache ActiveMQ Flaw

Threat actors are targeting a recently disclosed flaw in Apache ActiveMQ in order to attempt to deploy ransomware against targeted organizations.

Researchers with Rapid7 on Wednesday said that they have observed suspected exploitation of the remote code execution flaw (tracked as CVE-2023-46604) in two different customer environments. Apache disclosed this flaw and released patches for it on Oct. 25, and proof-of-concept exploit code is also available for the bug.

“Based on the ransom note and available evidence, we attribute the …

apache apache activemq code code execution customer cve cve-2023-46604 deploy environments exploitation flaw order organizations patches ransomware rapid7 remote code remote code execution researchers target targeting threat threat actors