Threat actor DEV-0322 exploiting ZOHO ManageEngine ADSelfService Plus

🗓️ 09 Nov 2021 00:24:55Reported by Eric AvenaType

Threat actor DEV-0322 exploiting ZOHO ManageEngine ADSelfService Plus Microsoft and other organizations identified DEV-0322 group in targeted campaigns, compromising systems running ZOHO ManageEngine ADSelfService Plus vulnerable versions. Their activities include credential dumping, custom binary installation, and lateral movement within the network

Reporter	Title	Published	Views	Family All 73
0day.today	ManageEngine ADSelfService Plus Authentication Bypass / Code Execution Exploit	27 Nov 202100:00	–	zdt
GithubExploit	Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine_Adselfservice_Plus	12 Oct 202409:01	–	githubexploit
GithubExploit	Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine_Adselfservice_Plus	16 Oct 202411:23	–	githubexploit
GithubExploit	Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine_Adselfservice_Plus	3 Nov 202114:49	–	githubexploit
GithubExploit	Exploit for Use of Incorrectly-Resolved Name or Reference in Zohocorp Manageengine_Adselfservice_Plus	12 Oct 202409:09	–	githubexploit
ICS	APT Actors Exploiting Newly Identified Vulnerability in ManageEngine ADSelfService Plus	22 Nov 202112:00	–	ics
ICS	2021 Top Routinely Exploited Vulnerabilities	28 Apr 202212:00	–	ics
ICS	Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors	6 Oct 202212:00	–	ics
ICS	People's Republic of China State-Sponsored Cyber Actor Living off the Land to Evade Detection	24 May 202312:00	–	ics
ICS	2022 Top Routinely Exploited Vulnerabilities	3 Aug 202312:00	–	ics