{"id":43788,"date":"2021-11-08T16:15:05","date_gmt":"2021-11-08T16:15:05","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/youll-never-guess-whos-been-exploiting-the-manageengine-service-to-steal-passwords\/"},"modified":"2021-11-08T16:15:05","modified_gmt":"2021-11-08T16:15:05","slug":"youll-never-guess-whos-been-exploiting-the-manageengine-service-to-steal-passwords","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/youll-never-guess-whos-been-exploiting-the-manageengine-service-to-steal-passwords\/","title":{"rendered":"You’ll never guess who’s been exploiting the ManageEngine service to steal passwords"},"content":{"rendered":"

Palo Alto Networks’ Unit 42 research team has said criminals using tools accompanied by Chinese instructions gained access to high-interest networks and stole passwords after exploiting at least 370 password management services in the US.<\/p>\n

“As early as September 17 the actor leveraged leased infrastructure in the United States to scan hundreds of vulnerable organizations across the internet,” wrote<\/a> Unit 42. “Subsequently, exploitation attempts began on Sept. 22 and likely continued into early October.”<\/p>\n

Unit 42 said that between September and October, the miscreant successfully compromised at least nine global entities across the technology, defense, healthcare, energy and education industries.<\/p>\n