Security News > 2020 > September > Iranian Hackers Target Critical Vulnerability in F5's BIG-IP

A hacking group believed to be linked to the Iranian government was observed targeting a critical vulnerability that F5 Networks addressed in its BIG-IP application delivery controller in early July.

Tracked as CVE-2020-5902 and featuring a CVSS score of 10, the vulnerability allows remote attackers to take complete control of a targeted system.

One threat group targeting the vulnerability, Crowdstrike notes in a blog post, is PIONEER KITTEN, an Iran-based cyber-espionage group believed to be "a contract element operating in support of the Iranian government."

The group's focus is on "Gaining and maintaining access to entities possessing sensitive information of likely intelligence interest to the Iranian government," Crowdstrike notes.

"The widespread nature of PIONEER KITTEN's target scope is likely a result of the adversary's opportunistic operational model; the entities apparently of most interest to the adversary are technology, government, defense, and healthcare organizations," Crowdstrike says.

News URL

http://feedproxy.google.com/~r/Securityweek/~3/sttsU8k-fro/iranian-hackers-target-critical-vulnerability-f5s-big-ip