This starts like a classic refund scam: fake invoices, remote access, and a “refund form” designed to confuse you. Then the ...
A China-related attacker has exploited the vendor flaw since mid-2024, allowing it to move laterally, maintain persistent access, and deploy malware.