Cleo MFT Mass Exploitation Payload Analysis

Written by ARC Labs contributors, John Dwyer and Eric Gonzalez ARC Labs recently capture and analyzed the second and third stage payloads used during a Cleo MFT compromise. The compromise is a result of exploitation of CVE-2024-50623 which allows for unauthorized remote code execution. Additional reports suggest that exploitation of the vulnerability continues to be possible even after […]

The post Cleo MFT Mass Exploitation Payload Analysis appeared first on Binary Defense.