Skip to content
Submit incident
DII-2024-00152
ReportedReported by fewer than three independent publishers, with no official finding.

RansomHub Actors Exploit ZeroLogon Vuln in Recent Ransomware Attacks

In recent attacks involving the ominously growing RansomHub ransomware, attackers have exploited the so-called ZeroLogon flaw in the Windows Netlogon Remote Protocol from 2020 (CVE-2020-1472) to gain initial access...

5 June 2024 · Ransomware and extortion
5 June 2024
DII-2024-001525 sources ↓
Quick facts
Category
Ransomware and extortion
Source
DataBreaches.net
Date
5 June 2024
Drafted by
Raidu Incident Detection

What happened

Not publicly disclosed.

Classification

Category
Ransomware and extortion

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

DataBreaches.net
RansomHub Actors Exploit ZeroLogon Vuln in Recent Ransomware Attacks
5 June 2024
msrc.microsoft.com
CVE-2020-1472
symantec-enterprise-blogs.security.com
Symantec Broadcom
darkreading.com
DarkReading
securityboulevard.com
Security Boulevard