Attackers Exploit AhsayCBS Flaws to Deploy Sandbox-Evading Python Backdoor Ravie LakshmananNov 10, 2026Vulnerability / Cyber Attack Cybersecurity researchers have disclosed details of an attack that exploited two now-patched vulnerabilities in AhsayCBS to deliver a Python-based implant. The activity, observed by Huntress in early October 2026, involves the exploitation of a chain comprising CVE-2026-105133 and CVE-2026-105134 to bypass authentication and execute arbitrary commands on affected systems. Patches for the two vulnerabilities were released by Ahsay Backup in mid-October 2026. The two vulnerabilities are assessed to have been weaponized as zero-days, with the managed security platform first observing threat actors employing a smash-and-grab approach to deploy web shells and XMRig cryptocurrency miners on compromised systems. "However, this incident reflects a much larger intrusion with more patience; the operator planted shells in several places, ran two different miners, staged tunneling tools, and installed a custom implant, all on servers whose job is to hold backups," Huntress researcher Jonathan Semon said. Specifically, the unknown threat actor is said to have left five families of Jakarta Server Pages (JSP, formerly JavaServer Pages) web shells - nsmind.jsp, a signed API with command execution and file transfer capabilities using exec, cd, upload, and download parameters AhsayCBS.jsp, a loader that hides encrypted payloads in the pixel data of PNG images and runs them from memory Keyed command shell, which compares a hard-coded key against its own copy and, if it matches, runs the command via "cmd.exe" Keyed shell with file write, which expands on the keyed command web shell with the ability to write Base64-decoded bytes to any path the service account can reach and deploy more tools status_<six_random_letters>.jsp or st_<six_random_letters>.jsp (e.g., st_jgaejj.jsp), which are used to run commands, recursively delete any path provided as input, and delete themselves using cmd, del, and rm parameters. "[AhsayCBS.jsp's] disguise as an internal image preview service even extended down to a comment block describing a watermark endpoint," Huntress explained. "The web shell used only JSP implicit objects and fully qualified class names, meaning it would compile on any servlet container and on Java Development Kit (JDK) 6 and later." The attack, besides deploying an XMRig miner masquerading as Microsoft Edge, has been found to deliver a second XMRig miner ("kvm-agent.exe") that restarts every minute through a SYSTEM scheduled task, while using a different wallet and mining pool. The most notable aspect of the intrusion revolves around the Python backdoor ("main.py"), which is designed to run only on the host it's staged on and prevent it from executing within a sandbox or an analyst's machine. It achieves this by computing the SHA-256 cryptographic hash of the host's MachineGuid and looks for a marker file with the same name in the same directory housing the Python implant, and then runs an embedded x64 DLL in memory that contacts a command-and-control (C2) server ("creepexplosiondarknight[.]com"). In an attempt to fly under the radar, the attack chain also configures Microsoft Defender exclusions, while serving tunneling tools (GOST and Chisel) and legitimate remote access software (AnyDesk, Atera, and Splashtop) to establish persistent access. Evidence indicates that the threat actor may have targeted servers holding or managing backups. "On a related Veeam server in the same environment, we also saw a command consistent with NetExec's Veeam credential-theft module: a PowerShell script, apparently launched remotely through WMI, that queried the VeeamBackup PostgreSQL database for stored credentials and decrypted them with DPAPI," Semon said. "Backup software holds credentials for hypervisors, repositories and domain accounts. We cannot say how many of those credentials were retrieved, but the pairing of an Ahsay foothold with a Veeam credential query suggested the operator was interested in backup infrastructure on purpose, not by accident." Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post. cryptocurrency, Cyber Attack, data security, Malware, Vulnerability, Web Security Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub The Rise of the Threat Operator: How AI Will Redefine Security Operations and Careers New Wave of Refrigeration Cyberattacks Hits Supermarkets Across Europe, Forcing Stores to Pull Food Apple to Start Scanning Publicly Shared iCloud Photos and Files for Harmful Content OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux 5 Active Cyber Threats That Put US Enterprises at Risk in October 2026 Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw Is Your Exposure Management Platform Leaving You Exposed? Five Tests to Find Out The Collapsed Patch Window: Why Runtime Protection is Now Your First Line of Defense Against AI-Driven Attacks Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories Google Disrupts 1.3 Million-Device Android Botnet, Says TV Box Maker Sold Criminal Access The Flood is Coming And The Pipes Were Already Full Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft Assess Your Organization's AI Code Sprawl Exposure With This Practical Guide Detect Lateral Movement and Evasive Attacks With Corelight's Open NDR Platform Beyond CVE Scanning: Book a Demo of Continuous AI-Powered Web Pentesting See How Bitdefender GravityZone Identifies Shadow AI and Prioritizes Endpoint Risks Your SOC Has an Identity Blind Spot. Here's How to Fix It Learn how to close critical identity visibility gaps in your SOC, detect hidden threats, and accelerate incident response across human, machine, and AI identities. Attend Live Roadmap for AI-Ready Security Operations Evaluate Attack Surface Visibility With an AI Threat Readiness Framework Learn how to assess AI threat readiness, strengthen attack surface visibility, and prepare security operations for emerging threats in this practical webinar. Governance Sets the Ceiling on Your AI Security Program See the five moves that raise a Stage 2 Govern score to a defensible Stage 3. 11 Real Stories: How Identity Exposure Unlocks Active Attack Paths Map cross-domain privilege escalation to sever breach routes at key choke points. BeyondTrust an 8X Gartner® Magic Quadrant™ Leader for PAM Gain clarity on the PAM market and understand why BeyondTrust is again a Leader. The 2026 Identity Crisis: Why Your IAM is Only Half the Story Stop driving blind. See the identity blind spots traditional IAM misses. Watch now. The Collapsed Patch Window: Why Runtime Protection is Now Your First Line of Defense Against AI-Driven Attacks Your Attack Surface Is Growing Faster Than Your Team Can Respond The MSP Margin Math Nobody's Doing: Your Next Technician Might Already be on Payroll PEDM vs. Standing Elevated Privileges: Control Access Without Flooding the Helpdesk