Join our FREE personalized newsletter for news, trends, and insights that matter to everyone in America

Newsletter
New

???? Terramaster Pre-auth Rce 0-day Exploit Allegedly Offered On A Cybercrime Forum ⠀ Terramaster Is A Network-attached Storage (nas) Vendor That Develops Storage Appliances And Operating Systems For Home, Business, And Enterprise Environments. ⠀ A Cybercrime Forum Actor Using The Handle Lazaknoxgro

Card image cap

???? TerraMaster pre-auth RCE 0-day exploit allegedly offered on a cybercrime forum

TerraMaster is a network-attached storage (NAS) vendor that develops storage appliances and operating systems for home, business, and enterprise environments.

A cybercrime forum actor using the handle LazaKNOXGroup claims to be selling an exclusive, unpatched pre-authentication remote code execution exploit affecting TerraMaster systems.

Claimed exploit details include:

• Affects TerraMaster V4 and V5
• Pre-authentication RCE
• Claimed code execution as root
• Described as a logical vulnerability
• Actor claims 100% reliability in testing
• Single-buyer exclusivity
• Full rights reportedly transferred to the buyer

The actor states that Deal Over Escrow is accepted and is marketing the exploit as an exclusive sale.

The vulnerability, affected versions, exploit reliability, and 0-day status have not been independently verified.

???? No delays. No guessing. No redactions. Get the intel threat actors see, the moment they post it. darkwebinformer.com/pricing