Attacker Uses MeshCentral Backdoor for Root Access at ISP 3BB

Threat intelligence researchers discovered that an attacker breached the network of Thai broadband provider 3BB. The intruder utilized the legitimate management tool MeshCentral as a backdoor to maintain remote control over internal systems and achieve root access. Additionally, subscriber credentials were targeted via an exposed server left accessible on the internet by the attacker.