Arctic Wolf Labs Archives

Arctic Wolf Labs

Arctic Wolf/ Cyber Security/ Palo Alto Networks/ SOC

Arctic Wolf Observes Threat Campaign Targeting Palo Alto Networks Firewall Devices

Alexander Ervik Johnsen Arctic Wolf, Arctic Wolf Labs, cobalt strike, CVE, exploit, Firewall, Palo Alto Networks, PAN-OS, RCE vulnerability, Sliver C2, Vulnerability 0 Comments 2024-11-28

Arctic Wolf Observes Ongoing Exploitation of Critical Palo Alto Networks Vulnerability CVE-2024-0012 Chained with CVE-2024-9474 On November 19, 2024, Arctic Wolf began observing active exploitation of the recently-disclosed CVE-2024-0012 and CVE-2024-9474 vulnerabilities impacting Palo Alto Networks PAN-OS software. When chained together, these vulnerabilities allow an unauthenticated threat actor with network access to the management web interface to gain administrator […]

Arctic Wolf/ ESXi/ VMware

Active ESXiArgs Ransomware Campaign Targeting ESXi Servers Worldwide

Alexander Ervik Johnsen Arctic Wolf, Arctic Wolf Labs, ESXiArgs, OpenSLP, Ransomware 2023-02-10

Early Friday morning, February 3, 2023, Arctic Wolf Labs began monitoring a new ransomware campaign targeting public-facing ESXi servers. The ESXiArgs Ransomware campaign has grown exponentially over the weekend, with approximately 3,000 victims worldwide as of early-Monday morning. Based on reporting from OVH, the threat actors behind this campaign are likely leveraging a nearly two year old heap […]