Versa

Reported Context (2)

since at least 2021, the threat actor was previously observed exploiting a file upload vulnerability in Versa Director as a zero-day (CVE-2024-39717) to deliver a bespoke web shell called VersaMem designed to harvest Black Lotus Labs Links Volt Typhoon to Silent Train Network Used in Zero-Day Campaigns
CVE-2024-39717 – Versa Director Volt Typhoon Uses ‘Silent Train’ Relay Framework in Zero-Day Attacks

CVE (5)

Malware (1)

Threat Actors (5)

MITRE ATT&CK (5)

Vendors (6)

Products (7)

Tools (2)

Industries (13)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.