An undocumented backdoor called Msupedge has been used in a cyber attack on a Taiwanese university. The origins and objectives of the attack are unknown. Msupedge communicates with a command-and-control (C&C) server via DNS traffic. The backdoor, a dynamic-link library (DLL), is likely deployed through exploiting a recent PHP flaw. It can receive commands and control server behavior based on resolved IP addresses.
PowerSchool Attackers Extorting Teachers, Security Leaders Respond
Security leaders advise organizations to carefully evaluate ransom payments in response to the PowerSchool attacks targeting teachers. They emphasize the importance of implementing strong cybersecurity
