Veeam vulnerability is being exploited to deploy malware via compromised VPN credentials

Hackers are exploiting a vulnerability in a Veeam product to deploy ransomware against their targets.

This is what cybersecurity researchers from Sophos say, who have described their findings in detail Infosec exchange late last week. According to the researchers, crooks are using a combination of compromised credentials and exploiting vulnerabilities to deploy Fog and Akira ransomware.