topic Re: Are we covered on below Vulnerability by XDR? in Cortex XDR Discussions

Are we covered on below Vulnerability by XDR?

asokum — Mon, 31 Jul 2023 12:50:47 GMT

CRITICAL - Linux version of Abyss Locker ransomware targets VMware ESXi servers

Links for more information:

https://www.bleepingcomputer.com/news/security/linux-version-of-abyss-locker-ransomware-targets-vmware-esxi-servers/

https://researchsnipers.com/abyss-locker-linux-version-targets-vms-for-ransom/

https://securityaffairs.com/148933/malware/abyss-locker-vmware-esxi.html

Re: Are we covered on below Vulnerability by XDR?

afurze — Mon, 31 Jul 2023 13:32:49 GMT

Hi Ashok.Shau,

For coverage assessment requests, please submit a TAC case with all relevant information including any available POC code.

Re: Are we covered on below Vulnerability by XDR?

asokum — Tue, 01 Aug 2023 07:47:27 GMT

can you guide me directions to open a TAC case? all I wanted to know is if such incidents will be covered by XDR as in the links I provided. no IOCs released so far.

CRITICAL - Linux version of Abyss Locker ransomware targets VMware ESXi servers

Links for more information:

https://www.bleepingcomputer.com/news/security/linux-version-of-abyss-locker-ransomware-targets-vmwa...

https://researchsnipers.com/abyss-locker-linux-version-targets-vms-for-ransom/

https://securityaffairs.com/148933/malware/abyss-locker-vmware-esxi.html

Re: Are we covered on below Vulnerability by XDR?

PiyushKohli — Tue, 01 Aug 2023 08:12:31 GMT

Hi @asokum

You may follow this KB to open the support case.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClNSCA0

Thank You