Double-Extortion Play Ransomware Strikes 300 Organizations Worldwide

🗓️ 19 Dec 2023 05:42:00Reported by The Hacker NewsType

Double-Extortion Play Ransomware Strikes 300 Organizations Worldwide. New threat called Play ransomware, aka Balloonfly and PlayCrypt, exploits vulnerabilities in Microsoft Exchange servers and Fortinet appliances. Ransomware-as-a-service operating, no initial ransom demand, affected regions include North America, South America, Europe, and Australia, now moving from phishing emails to exploiting vulnerabilities

Reporter	Title	Published	Views	Family All 324
GithubExploit	Exploit for Path Traversal in Fortinet Fortiproxy	14 Dec 202012:17	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Microsoft	20 Oct 202203:11	–	githubexploit
GithubExploit	Exploit for Path Traversal in Fortinet Fortiproxy	11 Aug 201909:44	–	githubexploit
GithubExploit	Exploit for Path Traversal in Fortinet Fortiproxy	23 May 202613:25	–	githubexploit
GithubExploit	Exploit for CVE-2022-41080	23 Dec 202223:46	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Microsoft	14 Oct 202217:01	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	16 May 202513:08	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Microsoft	4 Oct 202214:07	–	githubexploit
GithubExploit	Exploit for Server-Side Request Forgery in Microsoft	27 Jan 202611:39	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Microsoft	22 Dec 202209:35	–	githubexploit

19 Dec 2023 06:41Current

7.8High risk

Vulners AI Score7.8

CVSS 27.5

CVSS 3.19.8

EPSS0.99999