The Lorenz ransomware gang is exploiting a vulnerability in Mitel VoIP appliances to break corporate networks. Threat hunters with cybersecurity firm Arctic Wolf Labs recently found that Lorenz – a prolific group that has been around since at least early 2021 and lately is primarily targeting SMBs in the US, China, and Mexico – used a vulnerability (CVE-2022-29499) in a MiVoice VoIP appliance from Mitel to get into a victim’s network before deploying Microsoft’s BitLocker Drive Encryption tool to encrypt the data.

Read full article on The Register