Compromise Detection

Active Exploitation of VMware vCenter Flaw Lets Attackers Maintain Outbound Reverse Shells

The campaign uses a directory-traversal bug to drop cron jobs and an outbound reverse SSH client that can bypass inbound controls and so requires patching plus forensic eviction.