The risk actors behind the DragonForce ransomware gained entry to an unnamed Managed Service Supplier’s (MSP) SimpleHelp distant monitoring and administration (RMM) software, after which leveraged it to exfiltrate information and drop the locker on a number of endpoints.
It is believed that the attackers exploited a trio of safety flaws in SimpleHelp (CVE-2024-57727, CVE-2024-57728, and CVE-2024-57726) that have been
DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Throughout Buyer Endpoints
