Attacks exploiting a critical out-of-bounds write zero-day vulnerability in VMware Center Server, tracked as CVE-2023-34048, have been deployed by Chinese cyberespionage operation UNC3886 since 2021, two years before the flaw was identified and addressed, reports The Hacker News. UNC3886 leveraged the flaw to obtain vCenter system privileges and facilitate ESXi host and virtual machine enumeration to inject the VIRTUALPIE and VIRTUALPITA malware, a report from Mandiant revealed.

Source: SC Magazine