Almost immediately following the disclosure of a critical Apache Struts bug last Tuesday, exploit code for the vulnerability was published online and attackers reportedly began exploiting the flaw.
A "MongoDB ransacking" spreadsheet created by researchers Dylan Katz and Victor Gevers showed a single group that uses "[email protected]" is responsible for 22,000 of the accounts hacked.
Bitdefender researchers spotted three new Pacifier APT backdoor components that appear to link the group's cyberespionage campaigns against government institutions to the Russia-linked Turla Group.