WORLDTECHCybersecurity DEVELOPING
Hackers exploit N-able N-central zero-day "4EverAble2Shell" to deploy crypto miners
Attackers are actively exploiting a newly disclosed N-able N-central zero-day flaw, dubbed "4EverAble2Shell", to compromise servers and install cryptocurrency miners, according to BleepingComputer. Researchers report at least 21 affected systems.
Scope of the reported compromises
BleepingComputer reports that researchers have identified at least 21 affected systems. Of these, 19 are running the company's latest security update, a detail the report puts in front of administrators as a warning that the current update is not enough to stop the intrusions.
Exploitation of an unpatched flaw
The flaw is already being used in attacks although no fix exists yet. The intruders take control of servers through it and then use them to run cryptocurrency mining software.
Open questions
- Will N-able release a fix for the N-central flaw, and when?
- Could the count of 21 affected systems grow?