From Treasury Breach to Web Shells: How a BeyondTrust Vulnerability Became a Gateway for Chinese Cyber Espionage
A critical vulnerability in BeyondTrust’s Privileged Remote Access and Remote Support products, initially exploited in a high-profile breach of the U.S. Treasury Department, has now been linked to a broader campaign involving web shell deployment and persistent access by Chinese state-sponsored threat actors. The flaw, tracked as CVE-2024-12356, carries a near-maximum CVSS score of 9.8