Malicious hackers likely working on behalf of the Chinese government have been exploiting a high-severity zero-day vulnerability that allowed them to infect at least four US-based ISPs with malware that steals credentials used by downstream customers.

Follow

The vulnerability resides in the Versa Director, a virtualization platform that allows ISPs and managed service providers to manage complex networking infrastructures from a single dashboard, researchers from Black Lotus Labs, the research arm of security firm Lumen, said

blog.lumen.com/taking-the-cros

The attacks, which began no later than June 12 and are likely ongoing, allow the threat actors to install "VersaMem,” the name Lumen gave to a custom web shell that gives remote administrative control of Versa Director systems.

Black Lotus didn’t identify any of the affected ISPs, MSPs, or downstream customers.

Sign in to participate in the conversation

CounterSocial is the first Social Network Platform to take a zero-tolerance stance to hostile nations, bot accounts and trolls who are weaponizing OUR social media platforms and freedoms to engage in influence operations against us. And we're here to counter it.