China’s UNC4841 Shifts Focus to Exploit New Barracuda ESG Zero-Day Vulnerability

UNC4841, a Chinese state threat actor, has returned to targeting high-profile Barracuda customers. Last year, they exploited a remote code execution vulnerability in Barracuda Networks’ Email Security Gateway (ESG) appliances, and now they have exploited a newly disclosed zero-day vulnerability. Barracuda released an update to address the vulnerability but UNC4841 had already used it to deliver new variants of its malware to a limited number of devices. The vulnerability is an arbitrary code execution flaw in the open-source Amavis virus scanner, which runs on ESG appliances. Mandiant, a cybersecurity company, confirmed that the campaign was part of UNC4841’s ongoing espionage operations and Barracuda responded promptly by deploying updates to address the vulnerability. The vulnerability can be easily exploited through a specially crafted Excel attachment in an email, without any input required from the user. While Barracuda customers do not need to take further action since the update was deployed automatically, UNC4841’s interest in Barracuda Networks’ products dates back over a year, and it is advised that customers continue to monitor for any signs of UNC4841’s presence in their networks. UNC4841 is considered to be a “well-resourced” operation targeting high-value organizations such as government bodies, high-tech companies, telcos, manufacturing, and educational institutions. It is likely that UNC4841 will continue to modify its tactics and seek out new vulnerabilities in edge appliances in the future.

Unlock your business potential with our expert guidance. Get in touch now!

energy-power-electricity-pylons-bizioti-adobe.jpg

The AI Power Play: Navigating the High-Stakes Race for Energy Capacity

Omdias-Research-Director-for-Digital-Infrastructure-Vlad-Galabov.jpg

Transforming Data Center Power and Cooling: The Impact of AI

weak-link-vulnerability-management-2-adobe.jpg

Mitre Alerts About Gap in CVE Coverage

AdobeStock_513942839_Editorial_Use_Only.jpeg

HubSpot CRM Review 2025: Key Features, Advantages, and Disadvantages

cloud-access-and-identity-2-adobe.jpg

Unveiling the EuroStack Initiative: A Potential Game-Changer for Hyperscale Cloud in Europe?

iPhone-16-Pro-Lineup.jpg

iPhone Prices May Soar by Threefold Amid Intensifying US-China Tariff Conflict

Women-business-diversity-1-adobe.jpg

Survey Reveals Work-Life Balance as the Main Barrier for Women in Tech