PaperCut Software Flaw Sparks Ransomware Attacks, CISA Warns

The US Cybersecurity and Infrastructure Security Agency (CISA) has warned versus a critical flaw identified in PaperCut software, which has now been joined to a series of ransomware attacks.

The vulnerability (CVE-2023-27350) in PaperCut, a greatly adopted print administration solution, has authorized cyber-criminals to remotely execute malicious code without the need of demanding any authentication credentials. 

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

As a result, these attackers have properly deployed ransomware and illegally accessed sensitive data.

Read extra on this vulnerability below: Microsoft Blames Clop Affiliate for PaperCut Attacks

In response to the escalating threat, CISA and the Federal Bureau of Investigation (FBI) issued a cautionary advisory on Thursday urging users to choose quick motion to mitigate the risk.

“According to FBI noticed facts, malicious actors exploited CVE-2023-27350 commencing in mid-April 2023 and continuing by way of the existing,” reads the technical create-up.

In early May possibly 2023, the Education and learning Amenities Subsector turned a primary focus on for the Bl00dy Ransomware Gang, as described by the FBI. The team specifically aimed to exploit vulnerable PaperCut servers in the Subsector, resulting in info exfiltration, program encryption and the issuance of ransom requires.

“The Bl00dy Ransomware Gang still left ransom notes on sufferer methods demanding payment in exchange for the decryption of encrypted files.”

The joint advisory delivers detection techniques for the exploitation of CVE-2023-27350 as very well as indicators of compromise (IOCs) associated with Bl00dy Ransomware Gang activity. 

FBI and CISA strongly inspired consumers and directors to use patches immediately or workarounds if not able to patch. The organizations specifically encourage businesses that did not patch immediately to believe compromise and hunt for malicious activity utilizing the detection signatures in the advisory. 

If prospective compromise is detected, corporations should really apply the incident reaction tips included in the doc.

Its publication arrives a few of months soon after the FBI unveiled a assertion about a cyber-incident at 1 of its greatest-profile area offices.