Massive PSAUX ransomware attack targets 22,000 CyberPanel instances
ID: ce7f94fc-bf13-5ec5-b6b1-912cef0bb877
STIX ID: report--ce7f94fc-bf13-5ec5-b6b1-912cef0bb877
Feed Name: Bleeping Computer
Threat Score
Over 22,000 internet-exposed CyberPanel instances running vulnerable versions were mass-exploited via an unauthenticated RCE (root-level command execution) caused by defective per-page authentication, command injection, and middleware filter bypass; attackers deployed PSAUX ransomware (appending .psaux), a cryptominer, and other ransomware variants, while developers released patches (2.3.8) and LeakIX published a decryptor.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.