Microsoft: Chinese hackers are targeting Zoho ManageEngine software | ZDNet

Inside a ransomware gang: Beware these aggressive tactics Watch Now Microsoft has sent an alert about a sophisticated Chinese hacker group targeting an obscure bug in Zoho software to install a webshell. Microsoft Threat Intelligence Center (MSTIC) has detected exploits targeting systems running Zoho ManageEngine ADSelfService Plus , a self-service password management and single sign-on solution, with the remote code execution bug tracked as CVE-2021-40539 . Zoho is best known as a popular software-as-a-service vendor, while ManageEngine is the company’s enterprise IT management software division. ZDNet Recommends Best VPN services Best security keys Best antivirus software The fastest VPNs It’s…