Mauri Ransomware Exploits Apache ActiveMQ Vulnerability to Deploy Crypto Miners

Threat actors are actively exploiting the CVE-2023-46604 vulnerability to install CoinMiners and the Apache ActiveMQ vulnerability to deploy Mauri ransomware, primarily targeting Korean systems, while unpatched systems remain highly vulnerable to these attacks. Vulnerability CVE-2023-46604 allows remote code execution on unpatched Apache ActiveMQ servers by manipulating serialized class types in OpenWire protocol packets, tricking the … Continue reading Mauri Ransomware Exploits Apache ActiveMQ Vulnerability to Deploy Crypto Miners