Ransomware Gangs Exploit Unpatched SimpleHelp Flaws to Target Victims with Double Extortion

🗓️ 13 Jun 2025 11:02:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 19 Views

Ransomware gangs exploit SimpleHelp flaws to attack utility billing customers using double extortion.

Reporter	Title	Published	Views	Family All 66
githubexploit	Exploit for Path Traversal in Simple-Help Simplehelp	17 Jan 202515:45	–	githubexploit
attackerkb	CVE-2024-57728	15 Jan 202523:15	–	attackerkb
attackerkb	CVE-2024-57727	15 Jan 202500:00	–	attackerkb
attackerkb	CVE-2024-57726	15 Jan 202523:15	–	attackerkb
bdu_fstec	The vulnerability of SimpleHelp’s software for remote support lies in the insecure management of privileges, allowing a perpetrator to escalate their privileges.	27 Jan 202500:00	–	bdu_fstec
bdu_fstec	The vulnerability of SimpleHelp’s software for remote support stems from an incorrect limitation on the path to the restricted-access directory, allowing a perpetrator to disclose protected information.	27 Jan 202500:00	–	bdu_fstec
bdu_fstec	The vulnerability of SimpleHelp’s software for remote support lies in the improper handling of symbolic links before accessing the file. This allows a malicious actor to execute arbitrary code.	27 Jan 202500:00	–	bdu_fstec
circl	CVE-2024-57726	15 Jan 202507:04	–	circl
circl	CVE-2024-57727	15 Jan 202507:04	–	circl
circl	CVE-2024-57728	15 Jan 202507:04	–	circl

16 Jun 2025 08:13Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.9

EPSS0.95151

SSVC

ransomware exploitation simplehelp vulnerabilities unpatched software double extortion cybersecurity advisory