#centreon

Read the full report on -

France's cyber-security agency said that a group of Russian military hackers, known as the Sandworm group, have been behind a three-years-long operation during which they breached the internal networks of several French entities running the Centreon IT monitoring software.

The point of entry into victim networks was linked to Centreon, an IT resource monitoring platform developed by French company CENTREON, and a product similar in functionality to SolarWinds' Orion platform.

ANSSI said the attackers targeted Centreon systems that were left connected to the internet. The French agency couldn't say at the time of writing if the attacks exploited a vulnerability in the Centreon software or if the attackers guessed passwords for admin accounts.

However, in the case of a successful intrusion, the attackers installed a version of the P.A.S. web shell and the Exaramel backdoor trojan, two malware strains that when used together allowed hackers full control over the compromised system and its adjacent network.

The targeting of IT companies, and especially hosting providers, suggests the attackers might have focused on gaining access to email servers, which are often hosted or provided as part of web hosting packages.

Centreon Says that Russian Hackers Hit Older Versions of the Software

Centreon, a French software company, published a blog providing clarification on a report published by ANSSI , CERTFR-2021-CTI-004.According to Centreon,  Russian Hackers hit only older versions of Centreon software. Centreon clarifies that none of its paid customers have been subjected to the year-long hack on its primary product Centreon. Centreon boasts behemoths such as Airbus, […] The post…

Hackers targeted IT monitoring company Centreon to breach organizations over 3 year period

Hackers have spent up to three years breaking into organizations by targeting monitoring software made by the French company Centreon.Read More