APT attackers are using a security vulnerability in ManageEngine Desktop Central to take over servers, deliver malware and establish network persistence.
https://threatpost.com/zoho-zero-day-manageengine-active-attack/177178/
FBI: FatPipe VPN Zero-Day Exploited by APT for 6 Months
-
The bureau’s flash alert said an APT has been exploiting the flaw to compromise FatPipe router clustering and load balancer products to breach targets’ networks.
https://threatpost.com/fbi-fatpipe-vpn-zero-day-exploited-apt/176453/