RANSOMWARE GANG EXPLOITS SIMPLEHELP RMM TO COMPROMISE UTILITY BILLING FIRM

Summary from the TLDR InfoSec newsletter

The CISA has released an advisory that a path traversal vulnerability in the SimpleHelp Remote Management and Monitoring (RMM) tool is actively exploited. Sophos reported that the DragonForce ransomware gang is chaining this vulnerability with two other vulnerabilities to deploy ransomware across client networks. Following encryption, the threat actors employ a double extortion strategy, demanding a ransom for the data and threatening to leak the stolen data.