Attackers exploit AhsayCBS backup flaws to deploy disguised crypto miners

Summary

Threat actors are actively exploiting two recently disclosed vulnerabilities in AhsayCBS, the management console for Ahsay's cloud backup software. These flaws allow attackers to gain server control and deploy cryptocurrency miners disguised as legitimate processes. The vulnerabilities primarily impact managed service providers (MSPs) and system integrators who rely on AhsayCBS for user and backup policy management.

Indicators of Compromise

• cve — CVE-2024-31491
• cve — CVE-2024-31492

Entities