CISA Releases Malware Analysis Reports on Barracuda Backdoors

ronjor · Jul 28, 2023

Release Date July 28, 2023

CISA has published three malware analysis reports on malware variants associated with exploitation of CVE-2023-2868. CVE-2023-2868 is a remote command injection vulnerability affecting Barracuda Email Security Gateway (ESG) Appliance, versions 5.1.3.001-9.2.0.006. It was exploited as a zero day as early as October 2022 to gain access to ESG appliances.
Click to expand...

According to industry reporting, the actors exploited the vulnerability to gain initial access to victim systems and then implanted backdoors to establish and maintain persistence.
CISA analyzed backdoor malware variants obtained from an organization that had been compromised by threat actors exploiting the vulnerability.
Click to expand...

Log in or Sign up

CISA Releases Malware Analysis Reports on Barracuda Backdoors

ronjor Global Moderator

Log in or Sign up

CISA Releases Malware Analysis Reports on Barracuda Backdoors

ronjor Global Moderator

Useful Searches