SlashAndGrab | Huntress

T1Critical 100Covered by 1 source · first reported by Huntress at 23 Feb 2024, 00:00 UTC

Adversaries have been VERY busy in the wake of the ScreenConnect vulnerabilities (CVE-2024-1709 & CVE-2024-1708). Here’s all the post-exploitation details, tradecraft, and tactics we’ve observed so far!

security

Sources

T1SlashAndGrab | HuntressHuntress23 Feb 2024, 00:00

Vulnerabilities

CVE-2024-1709
CVE-2024-1708

Why this score

Signals contributing to the severity score
Signal	Points
kev added	50
kev short fuse — 7 days to remediate	15
kev ransomware	10
epss high	20
public poc — 6 repositories	20