Ransomware Gangs Exploit Unpatched SimpleHelp Flaws to Target Victims with Double Extortion

🗓️ 13 Jun 2025 11:02:00Reported by The Hacker NewsType

CISA warns ransomware groups exploit unpatched SimpleHelp flaws to breach downstream customers and extort.

Reporter	Title	Published	Views	Family All 70
GithubExploit	Exploit for Path Traversal in Simple-Help Simplehelp	17 Jan 202515:45	–	githubexploit
ATTACKERKB	CVE-2024-57728	15 Jan 202523:15	–	attackerkb
ATTACKERKB	CVE-2024-57727	15 Jan 202500:00	–	attackerkb
ATTACKERKB	CVE-2024-57726	15 Jan 202523:15	–	attackerkb
BDU FSTEC	The vulnerability of SimpleHelp’s software for remote support lies in the insecure management of privileges, allowing a perpetrator to escalate their privileges.	27 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of SimpleHelp’s software for remote support stems from an incorrect limitation on the path to the restricted-access directory, allowing a perpetrator to disclose protected information.	27 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of SimpleHelp’s software for remote support lies in the improper handling of symbolic links before accessing the file. This allows a malicious actor to execute arbitrary code.	27 Jan 202500:00	–	bdu_fstec
Circl	CVE-2024-57726	15 Jan 202507:04	–	circl
Circl	CVE-2024-57727	15 Jan 202507:04	–	circl
Circl	CVE-2024-57728	15 Jan 202507:04	–	circl