Chinese Hackers Exploited Sophos Firewall Zero-Day Flaw to Target South Asian Entity

🗓️ 17 Jun 2022 09:39:00Reported by The Hacker NewsType

Chinese APT used Sophos firewall zero-day to breach South Asian entity, executing man-in-the-middle attacks to compromise systems, exploiting CVE-2022-1040 flaw, backdooring security software with Behinder web shell for remote access. Also created VPN user accounts and modified DNS responses

Reporter	Title	Published	Views	Family All 287
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	10 Jun 202208:57	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	5 Jun 202218:23	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	10 Jun 202218:07	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	23 Nov 202405:35	–	githubexploit
GithubExploit	CVE-Confluence	13 Aug 202611:38	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	7 Jun 202211:17	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	9 Jun 202202:11	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	7 Jun 202206:57	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	7 Jun 202208:58	–	githubexploit
GithubExploit	Exploit for Expression Language Injection in Atlassian Confluence_Data_Center	16 Oct 202209:19	–	githubexploit

18 Jun 2022 03:43Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 3.19.8

EPSS0.99999