China-linked hackers exploit BeyondTrust flaw in remote support software
A previously unknown weakness in BeyondTrust software was used to plant a web shell and collect login details. Patching is the main step urged on users.
By Standard Topic. AI-generated from the reporting listed under Coverage. Published . Updated .
This story is no longer being updated. It reflects reporting up to .
What happened
An advanced persistent threat group tied to China exploited a zero-day flaw in BeyondTrust's Remote Support products that run on customers' own servers. The group deployed the SAWFLY web shell, and researchers say it is harvesting credentials and stealing sensitive information. All self-hosted users are being urged to patch the bug immediately.
Why it matters
The attacks target devices at the network edge, which makes them a concern for healthcare and other organizations. Patching known exposures is presented as a way to prevent further intrusions.
Timeline
- Oct 16, 7:01 AM ET: Researchers said the China-nexus hacker was harvesting credentials and stealing sensitive information.
- Oct 16, 8:00 AM ET: Users of all self-hosted BeyondTrust Remote Support appliances were urged to patch immediately.
- Oct 16, 4:34 PM ET: BeyondTrust's edge-device vulnerability was reported alongside similar flaws at Ivanti, Cisco and Palo Alto Networks this week.
Coverage
- BeyondTrust Zero-Day Continues Trend of Exploited Edge Bugs (darkreading.com)
- Chinese government-affiliated cyber threat actors target edge devices (healthcareitnews.com)
- Zero-Day in BeyondTrust Remote Support Appliances Exploited (bankinfosecurity.com)
- China-nexus espionage actor targets BeyondTrust support tool in zero-day campaign (cybersecuritydive.com)
- China-Linked Hackers Exploited BeyondTrust Zero-Day to Deploy SAWFLY and BARECLAW Malware (thehackernews.com)
More from Technology & AI
- Eight states sue OpenAI, alleging misleading AI safety claims
- OpenAI announces solution to Navier-Stokes math problem
- Datadog bets AI agents can handle testing of AI-written code
- Anthropic and OpenAI sketch wealth-sharing plans before IPOs
- Mamdani administration proposes AI customer service rules
- Florida engineers study how AI behaves in high-risk situations