Mastodawn

Cybersecurity Threat Surface Apr 27

🔴 This Zip File Can Own Your Server

Hackers are exploiting this RIGHT NOW to take full control of your server.

https://www.youtube.com/shorts/cGJPbISQARA

#cybersecurity #hacking #infosec #SimpleHelp #vulnerability #cve #threatintel #security #redteam

This Zip File Can Own Your Server #Shorts

YouTube

CyberNetsecIO Apr 17

📰 Phishing Campaign Abuses Legitimate SimpleHelp RMM Tool via Fake DHL 'Shipment Arrived' Emails

⚠️ Phishing Alert: Fake DHL 'shipment arrived' emails are dropping a malicious installer for the SimpleHelp RMM tool, giving attackers a backdoor into victim networks. Be cautious with attachments! 📦 #Phishing #Malware #SimpleHelp #RMM

🔗 https://cyber.netsecops.io/articles/phishing-campaign-abuses-simplehelp-rmm-tool-via-fake-dhl-emails/?utm_source=mastodon&utm_medium=soc…

Phishing Campaign Abuses Legitimate SimpleHelp RMM Tool via Fake DHL 'Shipment Arrived' Emails

A new phishing campaign impersonates DHL to trick users into installing a malicious, pre-configured version of the legitimate SimpleHelp RMM tool, providing attackers with backdoor access.

CyberNetSec.io

James_inthe_box Mar 2

Malicious #simplehelp #rmm #opendir at:

https://katz.adv\.br/dhl/

The Threat Codex Sep 12, 2025

You’re invited: Four phishing lures in campaigns dropping RMM tools
#ITarian #PDQConnect #SimpleHelp #AteraAgent
https://redcanary.com/blog/threat-intelligence/phishing-rmm-tools/

You’re invited: Four phishing lures in campaigns dropping RMM tools | Red Canary

Joint research from Red Canary Intelligence and Zscaler threat hunters spotlights phishing campaigns dropping RMM tools

Red Canary

Nightfighter 🛡️Jun 16, 2025

CISA Reveals 'Pattern' of #Ransomware #Attacks Against #SimpleHelp RMM

https://www.darkreading.com/cyberattacks-data-breaches/cisa-ransomware-attacks-simplehelp-rmm

CyberVeille.ch Jun 14, 2025

📢 Vulnérabilité dans SimpleHelp RMM exploitée par des acteurs de ransomware
📝 La **Cybersecurity and Infrastructure Security Agency (CISA)** americaine a publié un avis concernant l'exploitation par des acteurs de ransomware d'une **vul...
📖 cyberveille : https://cyberveille.ch/posts/2025-06-13-vulnerabilite-dans-simplehelp-rmm-exploitee-par-des-acteurs-de-ransomware/
🌐 source : https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-163a
#CISA #SimpleHelp #Cyberveille

Vulnérabilité dans SimpleHelp RMM exploitée par des acteurs de ransomware

La Cybersecurity and Infrastructure Security Agency (CISA) americaine a publié un avis concernant l’exploitation par des acteurs de ransomware d’une vulnérabilité non corrigée dans SimpleHelp Remote Monitoring and Management (RMM). Cette vulnérabilité a été utilisée pour compromettre les clients d’un fournisseur de logiciels de facturation de services publics. Depuis janvier 2025, un schéma plus large d’attaques par ransomware a été observé, ciblant les organisations via des versions non corrigées de SimpleHelp RMM. Les versions concernées sont les versions 5.5.7 et antérieures, qui contiennent plusieurs vulnérabilités, notamment la CVE-2024-57727, une vulnérabilité de traversée de chemin.

CyberVeille

Cyclone Jun 5, 2025

FBI: Over 900 Organizations Hit by Play Ransomware, SimpleHelp Exploits and ESXi Variants Used

https://forum.hashpwn.net/post/642

#playcrypt #ransomware #RaaS #simplehelp #exploit #esxi #hashpwn #cybersecurity #news

securityaffairs May 27, 2025

#DragonForce operator chained #SimpleHelp flaws to target an MSP and its customers
https://securityaffairs.com/178350/cyber-crime/dragonforce-operator-chained-simplehelp-flaws-to-target-an-msp.html
#securityaffairs #hacking #malware

DragonForce operator chained SimpleHelp flaws to target an MSP and its customers

Sophos warns that a DragonForce ransomware operator chained three vulnerabilities in SimpleHelp to target a managed service provider.

Security Affairs

securityaffairs Feb 14, 2025

U.S. #CISA adds #SimpleHelp flaw to its Known Exploited Vulnerabilities catalog
https://securityaffairs.com/174233/hacking/u-s-cisa-adds-simplehelp-flaw-known-exploited-vulnerabilities-catalog.html
#securityaffairs #hacking

U.S. CISA adds SimpleHelp flaw to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SimpleHelp vulnerability to its Known Exploited Vulnerabilities catalog.

Security Affairs

Tech Cybersecurity Nieuws Feb 6, 2025

Hackers misbruiken kwetsbaarheden in simplehelp rmm om sliver-malware te verspreiden https://www.trendingtech.news/trending-news/2025/02/53483/hackers-misbruiken-kwetsbaarheden-in-simplehelp-rmm-om-sliver-malware-te-verspreiden #SimpleHelp #RMM #Sliver malware #cyberaanval #beveiligingsupdate #Trending #News #Nieuws

Hackers misbruiken kwetsbaarheden in simplehelp rmm om sliver-malware te verspreiden

Cybercriminelen richten zich op kwetsbare SimpleHelp RMM-clients om beheerdersaccounts aan te maken en achterdeuren te installeren, wat mogelijk de basis legt

Tech Nieuws