{"schema":"vulnpedia.research/1","cve":"CVE-2023-27532","references":[{"url":"https://www.veeam.com/kb4424","tags":["x_transferred","Vendor Advisory"],"source":"mitre","sourceId":"hackerone","modified":"2023-03-10T00:00:00.000Z","origins":[{"source":"mitre","sourceId":"hackerone","modified":"2023-03-10T00:00:00.000Z","url":"https://www.veeam.com/kb4424"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-02T12:16:35.584Z","url":"https://www.veeam.com/kb4424"},{"source":"nvd","sourceId":"CVE-2023-27532","modified":"2026-06-17T05:45:24.980","url":"https://www.veeam.com/kb4424"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27532","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2025-10-21T23:15:24.077Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2025-10-21T23:15:24.077Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27532"},{"source":"nvd","sourceId":"CVE-2023-27532","modified":"2026-06-17T05:45:24.980","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-27532"}]},{"source":"euvd","sourceId":"EUVD-2023-31287","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31287","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2023-31287","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31287"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://labs.withsecure.com/publications/fin7-target-veeam-servers","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://labs.withsecure.com/publications/fin7-target-veeam-servers"}]},{"url":"https://thehackernews.com/2023/05/notorious-cyber-gang-fin7-returns-cl0p.html","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://thehackernews.com/2023/05/notorious-cyber-gang-fin7-returns-cl0p.html"}]},{"url":"https://blogs.blackberry.com/en/2023/08/cuba-ransomware-deploys-new-tools-targets-critical-infrastructure-sector-in-the-usa-and-it-integrator-in-latin-america","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://blogs.blackberry.com/en/2023/08/cuba-ransomware-deploys-new-tools-targets-critical-infrastructure-sector-in-the-usa-and-it-integrator-in-latin-america"}]},{"url":"https://information.rapid7.com/rs/411-NAK-970/images/Rapid7-2023-Mid-Year-Threat-Review.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://information.rapid7.com/rs/411-NAK-970/images/Rapid7-2023-Mid-Year-Threat-Review.pdf"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://blog.sekoia.io/sekoia-io-mid-2023-ransomware-threat-landscape","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://blog.sekoia.io/sekoia-io-mid-2023-ransomware-threat-landscape"}]},{"url":"https://25491742.fs1.hubspotusercontent-eu1.net/hubfs/25491742/WAZAWAKA_TLPCLEAR_Report.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://25491742.fs1.hubspotusercontent-eu1.net/hubfs/25491742/WAZAWAKA_TLPCLEAR_Report.pdf"}]},{"url":"https://news.sophos.com/en-us/2023/12/21/akira-again-the-ransomware-that-keeps-on-taking/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://news.sophos.com/en-us/2023/12/21/akira-again-the-ransomware-that-keeps-on-taking/"}]},{"url":"https://4502402.fs1.hubspotusercontent-na1.net/hubfs/4502402/Ransomware%202023%20Year%20in%20Review.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://4502402.fs1.hubspotusercontent-na1.net/hubfs/4502402/Ransomware%202023%20Year%20in%20Review.pdf"}]},{"url":"https://go.recordedfuture.com/hubfs/reports/cta-2024-0208.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://go.recordedfuture.com/hubfs/reports/cta-2024-0208.pdf"}]},{"url":"https://go.crowdstrike.com/rs/281-OBQ-266/images/GlobalThreatReport2024.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://go.crowdstrike.com/rs/281-OBQ-266/images/GlobalThreatReport2024.pdf"}]},{"url":"https://go.recordedfuture.com/hubfs/reports/ta-2024-0321.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://go.recordedfuture.com/hubfs/reports/ta-2024-0321.pdf"}]},{"url":"https://www.fortiguard.com/outbreak-alert/akira-ransomware","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.fortiguard.com/outbreak-alert/akira-ransomware"}]},{"url":"https://blog.talosintelligence.com/talos-ir-quarterly-trends-q1-2024/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://blog.talosintelligence.com/talos-ir-quarterly-trends-q1-2024/"}]},{"url":"https://www.rapid7.com/globalassets/_pdfs/research/rapid7_2024_attack_intelligence_report.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.rapid7.com/globalassets/_pdfs/research/rapid7_2024_attack_intelligence_report.pdf"}]},{"url":"https://thehackernews.com/2024/05/critical-veeam-backup-enterprise.html","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://thehackernews.com/2024/05/critical-veeam-backup-enterprise.html"}]},{"url":"https://www.group-ib.com/blog/estate-ransomware/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.group-ib.com/blog/estate-ransomware/"}]},{"url":"https://www.group-ib.com/blog/qilin-revisited/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.group-ib.com/blog/qilin-revisited/"}]},{"url":"https://redalert.nshc.net/2024/07/26/the-activities-summary-of-ransomware-threat-actors-in-2023-kor/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://redalert.nshc.net/2024/07/26/the-activities-summary-of-ransomware-threat-actors-in-2023-kor/"}]},{"url":"https://www.cyfirma.com/research/tracking-ransomware-july-2024/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.cyfirma.com/research/tracking-ransomware-july-2024/"}]},{"url":"https://redalert.nshc.net/2024/08/21/summary-of-ransomware-threat-actor-activity-in-2023-eng/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://redalert.nshc.net/2024/08/21/summary-of-ransomware-threat-actor-activity-in-2023-eng/"}]},{"url":"https://www.welivesecurity.com/en/eset-research/cosmicbeetle-steps-up-probation-period-ransomhub/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.welivesecurity.com/en/eset-research/cosmicbeetle-steps-up-probation-period-ransomhub/"}]},{"url":"https://redalert.nshc.net/2024/09/19/summary-of-ransomware-threat-actor-activity-in-2023-jpn/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://redalert.nshc.net/2024/09/19/summary-of-ransomware-threat-actor-activity-in-2023-jpn/"}]},{"url":"https://www.guidepointsecurity.com/wp-content/uploads/2021/07/Q3-2024_Ransomware_and-Cyber_Threat_Insights.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.guidepointsecurity.com/wp-content/uploads/2021/07/Q3-2024_Ransomware_and-Cyber_Threat_Insights.pdf"}]},{"url":"https://thedfirreport.com/2024/12/02/the-curious-case-of-an-egg-cellent-resume/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://thedfirreport.com/2024/12/02/the-curious-case-of-an-egg-cellent-resume/"}]},{"url":"https://www.crowdstrike.com/explore/2025-global-threat-report","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.crowdstrike.com/explore/2025-global-threat-report"}]},{"url":"https://catalyst.prodaft.com/public/report/modus-operandi-of-ruthless-mantis/overview","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://catalyst.prodaft.com/public/report/modus-operandi-of-ruthless-mantis/overview"}]},{"url":"https://content.kaspersky-labs.com/fm/site-editor/33/3318ec849851138088d24f26d236f469/source/irreport.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://content.kaspersky-labs.com/fm/site-editor/33/3318ec849851138088d24f26d236f469/source/irreport.pdf"}]},{"url":"https://www.security.com/threat-intelligence/ransomhub-betruger-backdoor","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.security.com/threat-intelligence/ransomhub-betruger-backdoor"}]},{"url":"https://blog.polyswarm.io/ransomhub-affiliate-uses-custom-betruger-backdoor","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://blog.polyswarm.io/ransomhub-affiliate-uses-custom-betruger-backdoor"}]},{"url":"https://news.sophos.com/en-us/2025/04/01/sophos-mdr-tracks-ongoing-campaign-by-qilin-affiliates-targeting-screenconnect/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://news.sophos.com/en-us/2025/04/01/sophos-mdr-tracks-ongoing-campaign-by-qilin-affiliates-targeting-screenconnect/"}]},{"url":"https://news.sophos.com/en-us/2025/04/16/the-sophos-annual-threat-report-cybercrime-on-main-street-2025/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://news.sophos.com/en-us/2025/04/16/the-sophos-annual-threat-report-cybercrime-on-main-street-2025/"}]},{"url":"https://services.google.com/fh/files/misc/m-trends-2025-en.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://services.google.com/fh/files/misc/m-trends-2025-en.pdf"}]},{"url":"https://blog.bushidotoken.net/2025/05/ransomware-tool-matrix-project-updates.html","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://blog.bushidotoken.net/2025/05/ransomware-tool-matrix-project-updates.html"}]},{"url":"https://blog.qualys.com/vulnerabilities-threat-research/2025/05/08/inside-lockbit-defense-lessons-from-the-leaked-lockbit-negotiations","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://blog.qualys.com/vulnerabilities-threat-research/2025/05/08/inside-lockbit-defense-lessons-from-the-leaked-lockbit-negotiations"}]},{"url":"https://blog.qualys.com/vulnerabilities-threat-research/2025/06/18/qilin-ransomware-explained-threats-risks-defenses","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://blog.qualys.com/vulnerabilities-threat-research/2025/06/18/qilin-ransomware-explained-threats-risks-defenses"}]},{"url":"https://medium.com/@nshcthreatrecon/2024-activities-summary-of-sectorj-groups-a8e34d3fb0df","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://medium.com/@nshcthreatrecon/2024-activities-summary-of-sectorj-groups-a8e34d3fb0df"}]},{"url":"https://www.zscaler.com/resources/industry-reports/threatlabz-2025-ransomware-analysis.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.zscaler.com/resources/industry-reports/threatlabz-2025-ransomware-analysis.pdf"}]},{"url":"https://www.trendmicro.com/en_us/research/25/h/warlock-ransomware.html","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.trendmicro.com/en_us/research/25/h/warlock-ransomware.html"}]},{"url":"https://www.kelacyber.com/blog/who-is-the-qilin-ransomware-group-and-how-do-they-operate/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.kelacyber.com/blog/who-is-the-qilin-ransomware-group-and-how-do-they-operate/"}]},{"url":"https://blog.polyswarm.io/recent-ransomware-threats-to-the-healthcare-vertical","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://blog.polyswarm.io/recent-ransomware-threats-to-the-healthcare-vertical"}]},{"url":"https://medium.com/@nshcthreatrecon/trend-report-of-ransomware-activities-in-2024-dae7246cc48f","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://medium.com/@nshcthreatrecon/trend-report-of-ransomware-activities-in-2024-dae7246cc48f"}]},{"url":"https://zensec.co.uk/blog/unmasking-akira-the-ransomware-tactics-you-cant-afford-to-ignore/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://zensec.co.uk/blog/unmasking-akira-the-ransomware-tactics-you-cant-afford-to-ignore/"}]},{"url":"https://s2w.inc/en/resource/detail/925","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://s2w.inc/en/resource/detail/925"}]},{"url":"https://slcyber.io/whitepapers-reports/an-escalation-in-attacks-the-ransomware-landscape-in-h1-2025/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://slcyber.io/whitepapers-reports/an-escalation-in-attacks-the-ransomware-landscape-in-h1-2025/"}]},{"url":"https://www.enisa.europa.eu/sites/default/files/2025-10/ENISA%20Threat%20Landscape%202025.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.enisa.europa.eu/sites/default/files/2025-10/ENISA%20Threat%20Landscape%202025.pdf"}]},{"url":"https://www.blackfog.com/stopping-akira-through-blackfogs-prevention-first-strategy/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.blackfog.com/stopping-akira-through-blackfogs-prevention-first-strategy/"}]},{"url":"https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-russian-cyber-threat-group-targeting-western-critical-infrastructure/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-russian-cyber-threat-group-targeting-western-critical-infrastructure/"}]},{"url":"https://medium.com/@nshcthreatrecon/weekly-threat-intelligence-report-22-dec-2025-6f024012a0b6","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://medium.com/@nshcthreatrecon/weekly-threat-intelligence-report-22-dec-2025-6f024012a0b6"}]},{"url":"https://falconfeeds.io/blogs/akira-ransomware-strategic-operational-threat-analysis-2023-2026","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://falconfeeds.io/blogs/akira-ransomware-strategic-operational-threat-analysis-2023-2026"}]},{"url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025"}]},{"url":"https://a.storyblok.com/f/313778/x/52dec39251/securin_ransomware-index-report_2025.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://a.storyblok.com/f/313778/x/52dec39251/securin_ransomware-index-report_2025.pdf"}]},{"url":"https://www.picussecurity.com/resource/blog/top-10-ransomware-groups-of-2025","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.picussecurity.com/resource/blog/top-10-ransomware-groups-of-2025"}]},{"url":"https://ics-cert.kaspersky.com/publications/reports/2026/03/06/apt-and-financial-attacks-on-industrial-organizations-in-q4-2025/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://ics-cert.kaspersky.com/publications/reports/2026/03/06/apt-and-financial-attacks-on-industrial-organizations-in-q4-2025/"}]},{"url":"https://resource.redcanary.com/rs/003-YRU-314/images/2026-ThreatDetectionReport_RedCanary.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://resource.redcanary.com/rs/003-YRU-314/images/2026-ThreatDetectionReport_RedCanary.pdf"}]},{"url":"https://www.group-ib.com/blog/hastalamuerte-gentlemen-raas-ttps/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.group-ib.com/blog/hastalamuerte-gentlemen-raas-ttps/"}]},{"url":"https://www.halcyon.ai/ransomware-research-reports/akira-ransomware-attacks-in-under-an-hour","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.halcyon.ai/ransomware-research-reports/akira-ransomware-attacks-in-under-an-hour"}]},{"url":"https://www.acn.gov.it/portale/w/qilin-campagne-di-sfruttamento-sistematico-e-diffusione-del-ransomware-sul-territorio-nazionale","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.acn.gov.it/portale/w/qilin-campagne-di-sfruttamento-sistematico-e-diffusione-del-ransomware-sul-territorio-nazionale"}]},{"url":"https://www.recordedfuture.com/research/h1-2026-malware-vulnerability-trends","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.recordedfuture.com/research/h1-2026-malware-vulnerability-trends"}]},{"url":"https://www.zscaler.com/resources/industry-reports/threatlabz-2026-ransomware-analysis.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.zscaler.com/resources/industry-reports/threatlabz-2026-ransomware-analysis.pdf"}]},{"url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-293a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-293a"}]},{"url":"https://vulncheck.com/xdb/be7830da6e38","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"be7830da6e38","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"be7830da6e38","modified":"2023-04-26T00:00:00Z","url":"https://vulncheck.com/xdb/be7830da6e38"}]},{"url":"https://github.com/sfewer-r7/CVE-2023-27532","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"be7830da6e38","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"be7830da6e38","modified":"2023-04-26T00:00:00Z","url":"https://github.com/sfewer-r7/CVE-2023-27532"}]},{"url":"https://vulncheck.com/xdb/70b9158e5d47","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"70b9158e5d47","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"70b9158e5d47","modified":"2023-04-26T00:00:00Z","url":"https://vulncheck.com/xdb/70b9158e5d47"}]},{"url":"https://github.com/horizon3ai/CVE-2023-27532","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"70b9158e5d47","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"70b9158e5d47","modified":"2023-04-26T00:00:00Z","url":"https://github.com/horizon3ai/CVE-2023-27532"}]},{"url":"https://vulncheck.com/xdb/a0eedd90601f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"a0eedd90601f","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a0eedd90601f","modified":"2023-04-26T00:00:00Z","url":"https://vulncheck.com/xdb/a0eedd90601f"}]},{"url":"https://github.com/puckiestyle/CVE-2023-27532-RCE-Only","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"a0eedd90601f","modified":"2023-04-26T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a0eedd90601f","modified":"2023-04-26T00:00:00Z","url":"https://github.com/puckiestyle/CVE-2023-27532-RCE-Only"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/horizon3ai/CVE-2023-27532","source":"poc-in-github","sourceId":"CVE-2023-27532","description":"POC for Veeam Backup and Replication CVE-2023-27532","modified":"2026-10-04T00:50:26Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27532","url":"https://github.com/horizon3ai/CVE-2023-27532"},{"source":"poc-in-github","sourceId":"CVE-2023-27532","modified":"2026-10-04T00:50:26Z","url":"https://github.com/horizon3ai/CVE-2023-27532"}],"tags":[]},{"url":"https://github.com/sfewer-r7/CVE-2023-27532","source":"poc-in-github","sourceId":"CVE-2023-27532","description":"Exploit for CVE-2023-27532 against Veeam Backup & Replication","modified":"2026-10-22T20:14:45Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27532","url":"https://github.com/sfewer-r7/CVE-2023-27532"},{"source":"poc-in-github","sourceId":"CVE-2023-27532","modified":"2026-10-22T20:14:45Z","url":"https://github.com/sfewer-r7/CVE-2023-27532"}],"tags":[]},{"url":"https://github.com/puckiestyle/CVE-2023-27532-RCE-Only","source":"poc-in-github","sourceId":"CVE-2023-27532","modified":"2024-07-10T11:34:46Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27532","url":"https://github.com/puckiestyle/CVE-2023-27532-RCE-Only"},{"source":"poc-in-github","sourceId":"CVE-2023-27532","modified":"2024-07-10T11:34:46Z","url":"https://github.com/puckiestyle/CVE-2023-27532-RCE-Only"}],"tags":[]},{"url":"https://github.com/yunus-a1i/veeam-cve-2023-27532-mock","source":"poc-in-github","sourceId":"CVE-2023-27532","modified":"2025-11-26T17:22:46Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-27532","url":"https://github.com/yunus-a1i/veeam-cve-2023-27532-mock"},{"source":"poc-in-github","sourceId":"CVE-2023-27532","modified":"2025-11-26T17:22:46Z","url":"https://github.com/yunus-a1i/veeam-cve-2023-27532-mock"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"be7830da6e38","url":"https://vulncheck.com/xdb/be7830da6e38","cve":"CVE-2023-27532","dateAdded":"2023-12-20T23:20:16Z","modified":"2023-04-26T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/sfewer-r7/CVE-2023-27532","observations":[{"dateAdded":"2023-12-20T23:20:16Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"be7830da6e38","modified":"2023-04-26T00:00:00Z","url":"https://vulncheck.com/xdb/be7830da6e38"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"70b9158e5d47","url":"https://vulncheck.com/xdb/70b9158e5d47","cve":"CVE-2023-27532","dateAdded":"2023-12-20T23:20:17Z","modified":"2023-04-26T00:00:00Z","exploitType":"infoleak","repositoryUrl":"https://github.com/horizon3ai/CVE-2023-27532","observations":[{"dateAdded":"2023-12-20T23:20:17Z","exploitType":"infoleak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"70b9158e5d47","modified":"2023-04-26T00:00:00Z","url":"https://vulncheck.com/xdb/70b9158e5d47"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"a0eedd90601f","url":"https://vulncheck.com/xdb/a0eedd90601f","cve":"CVE-2023-27532","dateAdded":"2024-10-22T14:09:57Z","modified":"2023-04-26T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/puckiestyle/CVE-2023-27532-RCE-Only","observations":[{"dateAdded":"2024-10-22T14:09:57Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"a0eedd90601f","modified":"2023-04-26T00:00:00Z","url":"https://vulncheck.com/xdb/a0eedd90601f"}]}],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2023-04-26T00:00:00Z","modified":"2023-04-26T00:00:00Z","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Known","reportedByVulncheckCanaries":false,"vendorProject":"Veeam","product":"Backup & Replication","dueDate":"2023-09-12T00:00:00Z","cisaDateAdded":"2023-08-22T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","modified":"2023-04-26T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://labs.withsecure.com/publications/fin7-target-veeam-servers","dateAdded":"2023-04-26T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://labs.withsecure.com/publications/fin7-target-veeam-servers"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://thehackernews.com/2023/05/notorious-cyber-gang-fin7-returns-cl0p.html","dateAdded":"2023-05-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://thehackernews.com/2023/05/notorious-cyber-gang-fin7-returns-cl0p.html"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://blogs.blackberry.com/en/2023/08/cuba-ransomware-deploys-new-tools-targets-critical-infrastructure-sector-in-the-usa-and-it-integrator-in-latin-america","dateAdded":"2023-08-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://blogs.blackberry.com/en/2023/08/cuba-ransomware-deploys-new-tools-targets-critical-infrastructure-sector-in-the-usa-and-it-integrator-in-latin-america"},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://information.rapid7.com/rs/411-NAK-970/images/Rapid7-2023-Mid-Year-Threat-Review.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2023-08-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.sekoia.io/sekoia-io-mid-2023-ransomware-threat-landscape","dateAdded":"2023-09-14T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://blog.sekoia.io/sekoia-io-mid-2023-ransomware-threat-landscape"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://25491742.fs1.hubspotusercontent-eu1.net/hubfs/25491742/WAZAWAKA_TLPCLEAR_Report.pdf","dateAdded":"2023-12-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://25491742.fs1.hubspotusercontent-eu1.net/hubfs/25491742/WAZAWAKA_TLPCLEAR_Report.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://news.sophos.com/en-us/2023/12/21/akira-again-the-ransomware-that-keeps-on-taking/","dateAdded":"2023-12-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://news.sophos.com/en-us/2023/12/21/akira-again-the-ransomware-that-keeps-on-taking/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://4502402.fs1.hubspotusercontent-na1.net/hubfs/4502402/Ransomware%202023%20Year%20in%20Review.pdf","dateAdded":"2024-01-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://4502402.fs1.hubspotusercontent-na1.net/hubfs/4502402/Ransomware%202023%20Year%20in%20Review.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://go.recordedfuture.com/hubfs/reports/cta-2024-0208.pdf","dateAdded":"2024-02-08T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://go.recordedfuture.com/hubfs/reports/cta-2024-0208.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://go.crowdstrike.com/rs/281-OBQ-266/images/GlobalThreatReport2024.pdf","dateAdded":"2024-02-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://go.crowdstrike.com/rs/281-OBQ-266/images/GlobalThreatReport2024.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://go.recordedfuture.com/hubfs/reports/ta-2024-0321.pdf","dateAdded":"2024-03-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://go.recordedfuture.com/hubfs/reports/ta-2024-0321.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.fortiguard.com/outbreak-alert/akira-ransomware","dateAdded":"2024-04-23T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.fortiguard.com/outbreak-alert/akira-ransomware"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.talosintelligence.com/talos-ir-quarterly-trends-q1-2024/","dateAdded":"2024-04-25T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://blog.talosintelligence.com/talos-ir-quarterly-trends-q1-2024/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.rapid7.com/globalassets/_pdfs/research/rapid7_2024_attack_intelligence_report.pdf","dateAdded":"2024-05-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.rapid7.com/globalassets/_pdfs/research/rapid7_2024_attack_intelligence_report.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://thehackernews.com/2024/05/critical-veeam-backup-enterprise.html","dateAdded":"2024-05-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://thehackernews.com/2024/05/critical-veeam-backup-enterprise.html"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.group-ib.com/blog/estate-ransomware/","dateAdded":"2024-07-10T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.group-ib.com/blog/estate-ransomware/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.group-ib.com/blog/qilin-revisited/","dateAdded":"2024-07-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.group-ib.com/blog/qilin-revisited/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://redalert.nshc.net/2024/07/26/the-activities-summary-of-ransomware-threat-actors-in-2023-kor/","dateAdded":"2024-07-26T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://redalert.nshc.net/2024/07/26/the-activities-summary-of-ransomware-threat-actors-in-2023-kor/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cyfirma.com/research/tracking-ransomware-july-2024/","dateAdded":"2024-08-12T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.cyfirma.com/research/tracking-ransomware-july-2024/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://redalert.nshc.net/2024/08/21/summary-of-ransomware-threat-actor-activity-in-2023-eng/","dateAdded":"2024-08-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://redalert.nshc.net/2024/08/21/summary-of-ransomware-threat-actor-activity-in-2023-eng/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.welivesecurity.com/en/eset-research/cosmicbeetle-steps-up-probation-period-ransomhub/","dateAdded":"2024-09-10T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.welivesecurity.com/en/eset-research/cosmicbeetle-steps-up-probation-period-ransomhub/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://redalert.nshc.net/2024/09/19/summary-of-ransomware-threat-actor-activity-in-2023-jpn/","dateAdded":"2024-09-19T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://redalert.nshc.net/2024/09/19/summary-of-ransomware-threat-actor-activity-in-2023-jpn/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.guidepointsecurity.com/wp-content/uploads/2021/07/Q3-2024_Ransomware_and-Cyber_Threat_Insights.pdf","dateAdded":"2024-10-21T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.guidepointsecurity.com/wp-content/uploads/2021/07/Q3-2024_Ransomware_and-Cyber_Threat_Insights.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://thedfirreport.com/2024/12/02/the-curious-case-of-an-egg-cellent-resume/","dateAdded":"2024-12-02T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://thedfirreport.com/2024/12/02/the-curious-case-of-an-egg-cellent-resume/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.crowdstrike.com/explore/2025-global-threat-report","dateAdded":"2025-02-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.crowdstrike.com/explore/2025-global-threat-report"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://catalyst.prodaft.com/public/report/modus-operandi-of-ruthless-mantis/overview","dateAdded":"2025-03-04T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://catalyst.prodaft.com/public/report/modus-operandi-of-ruthless-mantis/overview"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://content.kaspersky-labs.com/fm/site-editor/33/3318ec849851138088d24f26d236f469/source/irreport.pdf","dateAdded":"2025-03-12T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://content.kaspersky-labs.com/fm/site-editor/33/3318ec849851138088d24f26d236f469/source/irreport.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.security.com/threat-intelligence/ransomhub-betruger-backdoor","dateAdded":"2025-03-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.security.com/threat-intelligence/ransomhub-betruger-backdoor"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.polyswarm.io/ransomhub-affiliate-uses-custom-betruger-backdoor","dateAdded":"2025-03-28T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://blog.polyswarm.io/ransomhub-affiliate-uses-custom-betruger-backdoor"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://news.sophos.com/en-us/2025/04/01/sophos-mdr-tracks-ongoing-campaign-by-qilin-affiliates-targeting-screenconnect/","dateAdded":"2025-04-01T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://news.sophos.com/en-us/2025/04/01/sophos-mdr-tracks-ongoing-campaign-by-qilin-affiliates-targeting-screenconnect/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://news.sophos.com/en-us/2025/04/16/the-sophos-annual-threat-report-cybercrime-on-main-street-2025/","dateAdded":"2025-04-16T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://news.sophos.com/en-us/2025/04/16/the-sophos-annual-threat-report-cybercrime-on-main-street-2025/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://services.google.com/fh/files/misc/m-trends-2025-en.pdf","dateAdded":"2025-04-23T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://services.google.com/fh/files/misc/m-trends-2025-en.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.bushidotoken.net/2025/05/ransomware-tool-matrix-project-updates.html","dateAdded":"2025-05-05T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://blog.bushidotoken.net/2025/05/ransomware-tool-matrix-project-updates.html"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.qualys.com/vulnerabilities-threat-research/2025/05/08/inside-lockbit-defense-lessons-from-the-leaked-lockbit-negotiations","dateAdded":"2025-05-08T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://blog.qualys.com/vulnerabilities-threat-research/2025/05/08/inside-lockbit-defense-lessons-from-the-leaked-lockbit-negotiations"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.qualys.com/vulnerabilities-threat-research/2025/06/18/qilin-ransomware-explained-threats-risks-defenses","dateAdded":"2025-06-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://blog.qualys.com/vulnerabilities-threat-research/2025/06/18/qilin-ransomware-explained-threats-risks-defenses"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://medium.com/@nshcthreatrecon/2024-activities-summary-of-sectorj-groups-a8e34d3fb0df","dateAdded":"2025-07-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://medium.com/@nshcthreatrecon/2024-activities-summary-of-sectorj-groups-a8e34d3fb0df"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.zscaler.com/resources/industry-reports/threatlabz-2025-ransomware-analysis.pdf","dateAdded":"2025-07-29T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.zscaler.com/resources/industry-reports/threatlabz-2025-ransomware-analysis.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.trendmicro.com/en_us/research/25/h/warlock-ransomware.html","dateAdded":"2025-08-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.trendmicro.com/en_us/research/25/h/warlock-ransomware.html"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.kelacyber.com/blog/who-is-the-qilin-ransomware-group-and-how-do-they-operate/","dateAdded":"2025-08-25T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.kelacyber.com/blog/who-is-the-qilin-ransomware-group-and-how-do-they-operate/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.polyswarm.io/recent-ransomware-threats-to-the-healthcare-vertical","dateAdded":"2025-09-08T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://blog.polyswarm.io/recent-ransomware-threats-to-the-healthcare-vertical"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://medium.com/@nshcthreatrecon/trend-report-of-ransomware-activities-in-2024-dae7246cc48f","dateAdded":"2025-09-12T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://medium.com/@nshcthreatrecon/trend-report-of-ransomware-activities-in-2024-dae7246cc48f"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://zensec.co.uk/blog/unmasking-akira-the-ransomware-tactics-you-cant-afford-to-ignore/","dateAdded":"2025-09-19T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://zensec.co.uk/blog/unmasking-akira-the-ransomware-tactics-you-cant-afford-to-ignore/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://s2w.inc/en/resource/detail/925","dateAdded":"2025-09-23T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://s2w.inc/en/resource/detail/925"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://slcyber.io/whitepapers-reports/an-escalation-in-attacks-the-ransomware-landscape-in-h1-2025/","dateAdded":"2025-09-25T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://slcyber.io/whitepapers-reports/an-escalation-in-attacks-the-ransomware-landscape-in-h1-2025/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.enisa.europa.eu/sites/default/files/2025-10/ENISA%20Threat%20Landscape%202025.pdf","dateAdded":"2025-10-09T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.enisa.europa.eu/sites/default/files/2025-10/ENISA%20Threat%20Landscape%202025.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.blackfog.com/stopping-akira-through-blackfogs-prevention-first-strategy/","dateAdded":"2025-11-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.blackfog.com/stopping-akira-through-blackfogs-prevention-first-strategy/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-russian-cyber-threat-group-targeting-western-critical-infrastructure/","dateAdded":"2025-12-15T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-russian-cyber-threat-group-targeting-western-critical-infrastructure/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://medium.com/@nshcthreatrecon/weekly-threat-intelligence-report-22-dec-2025-6f024012a0b6","dateAdded":"2026-01-02T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://medium.com/@nshcthreatrecon/weekly-threat-intelligence-report-22-dec-2025-6f024012a0b6"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://falconfeeds.io/blogs/akira-ransomware-strategic-operational-threat-analysis-2023-2026","dateAdded":"2026-01-07T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://falconfeeds.io/blogs/akira-ransomware-strategic-operational-threat-analysis-2023-2026"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025","dateAdded":"2026-01-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://a.storyblok.com/f/313778/x/52dec39251/securin_ransomware-index-report_2025.pdf","dateAdded":"2026-02-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://a.storyblok.com/f/313778/x/52dec39251/securin_ransomware-index-report_2025.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.picussecurity.com/resource/blog/top-10-ransomware-groups-of-2025","dateAdded":"2026-02-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.picussecurity.com/resource/blog/top-10-ransomware-groups-of-2025"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://ics-cert.kaspersky.com/publications/reports/2026/03/06/apt-and-financial-attacks-on-industrial-organizations-in-q4-2025/","dateAdded":"2026-03-06T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://ics-cert.kaspersky.com/publications/reports/2026/03/06/apt-and-financial-attacks-on-industrial-organizations-in-q4-2025/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://resource.redcanary.com/rs/003-YRU-314/images/2026-ThreatDetectionReport_RedCanary.pdf","dateAdded":"2026-03-18T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://resource.redcanary.com/rs/003-YRU-314/images/2026-ThreatDetectionReport_RedCanary.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.group-ib.com/blog/hastalamuerte-gentlemen-raas-ttps/","dateAdded":"2026-03-19T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.group-ib.com/blog/hastalamuerte-gentlemen-raas-ttps/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.halcyon.ai/ransomware-research-reports/akira-ransomware-attacks-in-under-an-hour","dateAdded":"2026-04-01T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.halcyon.ai/ransomware-research-reports/akira-ransomware-attacks-in-under-an-hour"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.acn.gov.it/portale/w/qilin-campagne-di-sfruttamento-sistematico-e-diffusione-del-ransomware-sul-territorio-nazionale","dateAdded":"2026-05-26T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.acn.gov.it/portale/w/qilin-campagne-di-sfruttamento-sistematico-e-diffusione-del-ransomware-sul-territorio-nazionale"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.recordedfuture.com/research/h1-2026-malware-vulnerability-trends","dateAdded":"2026-09-03T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.recordedfuture.com/research/h1-2026-malware-vulnerability-trends"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.zscaler.com/resources/industry-reports/threatlabz-2026-ransomware-analysis.pdf","dateAdded":"2026-09-30T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.zscaler.com/resources/industry-reports/threatlabz-2026-ransomware-analysis.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-293a","dateAdded":"2026-10-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2023-27532","url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-293a"}]}]}