BianLian Group Exploits JetBrains TeamCity Bugs in Ransomware Attacks
BianLian Group Exploits JetBrains TeamCity Bugs in Ransomware Attacks
11 March 2024
The BianLian ransomware group exploited vulnerabilities in JetBrains TeamCity software to gain initial access to target environments. The group attempted to execute a custom GO backdoor but switched to LotL and utilized a PowerShell backdoor instead.