DevOps協作平臺Atlassian Confluence已知漏洞遭到利用，對Linux主機散布勒索軟體Cerber
· 2024-04-18
研究人員揭露最近一波勒索軟體Cerber攻擊行動，對方入侵受害組織的管道，就是DevOps協作平臺Atlassian Confluence已知漏洞CVE-2023-22518
Cado
研究人員發現，使用勒索軟體Cerber從事攻擊行動的駭客，3月下旬利用DevOps協作平臺Atlassian Confluence已知漏洞CVE-2023-22518，目的是對受害組織植入Linux版勒索軟體程式。
資安業者Cado發現，3月19日出於經濟動機的駭客企圖利用上述漏洞存取Confluence實體，從而濫用管理員帳號於受害主機部署Effluence Web shell外掛程式，從而藉由網頁介面執行任意命令，下載並執行Cerber的有效酬載。
CVE-2023-22518是身分驗證不當漏洞，一旦攻擊者利用，就有機會在未經授權的情況下重設Confluence伺服器組態，並建立新的管理員帳號，並濫用該帳號執行管理員工作，從而接管系統，導致機密性、完整性、可用性喪失，CVSS風險評分為9.1，Atlassian於去年10月發布新版軟體予以修補。
研究人員指出，由於在預設組態中，Confluence伺服器以低權限使用者（confluence）執行，因此該勒索軟體能加密的檔案有限，僅為該帳號能夠存取的資料。但若是攻擊者能夠取得較高權限，加密檔案的範圍將會擴大。
值得留意的是，駭客利用這項漏洞散布Cerber已非首例。去年11月，資安業者Rapid7發現該勒索軟體的攻擊行動，對方其中一個利用的漏洞就是CVE-2023-22518。
Popular articles
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
What’s on the SBC Summit Conference Agenda in 2026?
Marketing
