Hackers planted five webshell families on Ahsay backup servers, Huntress finds
An investigation of three compromised servers uncovered an image-based malware loader, a custom Python implant and tools that could expose backup credentials. Attackers who exploited vulnerabilities in AhsayCBS, a backup management platform used by managed service providers (MSPs) and system integrators, planted five families of webshells, deployed multiple cryptominers and installed a custom malware implant, […]
Continue Reading