Tag: legitimate tool misuse

MeshCentral Backdoor Exploited in 3BB Broadband Network Breach

Researchers uncovered a sneaky backdoor in 3BB's network, one of Thailand's largest broadband providers, where an attacker used MeshCentral, a legitimate remote-management tool, to maintain secret control of internal machines. The culprit installed MeshCentral agents on compromised servers, allowing them to run tools and gain full administrative control of at least one server.