ESG

Barracuda, a network and email security company, disclosed today that a recently patched zero-day vulnerability has been used for at least seven months to install specialised malware on customers' Email Security Gateway (ESG) equipment and steal data.

According to the business, a continuing investigation revealed that the issue gave attackers access to a portion of ESG equipment and installed backdoors that gave them ongoing access to the affected systems.

Additionally, Barracuda found proof that the threat actors stole data from the backdoored ESG appliances.

The company fixed the problem by installing a security patch on all ESG appliances and, a day later, by deploying a specialised script, blocking the attackers' access to the compromised devices.

Source: https://www.bleepingcomputer.com/news/security/barracuda-zero-day-abused-since-2022-to-drop-new-malware-steal-data/

"id": "ESG2304623",
"linkid": "energy-services-group-esg-",
"type": "Vulnerability",
"date": "05/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"