DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer Endpoints

🗓️ 29 May 2025 10:34:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 21 Views

DragonForce exploited SimpleHelp flaws to deploy ransomware on multiple customer endpoints.

Reporter	Title	Published	Views	Family All 66
GithubExploit	Exploit for Path Traversal in Simple-Help Simplehelp	17 Jan 202515:45	–	githubexploit
ATTACKERKB	CVE-2024-57728	15 Jan 202523:15	–	attackerkb
ATTACKERKB	CVE-2024-57727	15 Jan 202500:00	–	attackerkb
ATTACKERKB	CVE-2024-57726	15 Jan 202523:15	–	attackerkb
BDU FSTEC	The vulnerability of SimpleHelp’s software for remote support lies in the insecure management of privileges, allowing a perpetrator to escalate their privileges.	27 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of SimpleHelp’s software for remote support stems from an incorrect limitation on the path to the restricted-access directory, allowing a perpetrator to disclose protected information.	27 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of SimpleHelp’s software for remote support lies in the improper handling of symbolic links before accessing the file. This allows a malicious actor to execute arbitrary code.	27 Jan 202500:00	–	bdu_fstec
Circl	CVE-2024-57726	15 Jan 202507:04	–	circl
Circl	CVE-2024-57727	15 Jan 202507:04	–	circl
Circl	CVE-2024-57728	15 Jan 202507:04	–	circl

30 May 2025 03:58Current

7.4High risk

Vulners AI Score7.4

CVSS 3.19.9

EPSS0.95151

SSVC

dragonforce ransomware simplehelp flaws managed service provider data exfiltration double extortion attaques