Cybersecurity incident — 2023-11-10 00:00:00
Affected organization: New Zealand Government
Affected country: New Zealand
Industry: Public Administration
Event type: Exploitive
Event subtype: Undetermined
Motive: Undetermined
Actor: Actor231004
Actor type: Undetermined
Actor country: Undetermined

Researchers from NSFOCUS reveal that a threat actor marked as Actor231004 launched attacks against governmental sectors of New Zealand exploiting the CVE-2023-38831 WinRAR vulnerability to deliver the Bumblebee malware.