Attack Cases Against HTTP File Server (HFS) (CVE-2024-23692)

Researchers have discovered ongoing exploitation of a critical vulnerability in the HTTP File Server (HFS) that is being used to deploy cryptocurrency mining malware, Remote Access Trojans (RATs), backdoors, and infostealers.
This vulnerability, identified as CVE-2024-23692, impacts the Rejetto HTTP File Server (HFS), a software that enables file sharing through a web browser using only an executable file, bypassing the need for a traditional web server. Its simplicity has made it a popular choice for users seeking an easy way to share files.
However, because HFS is publicly accessible to allow user connections, it becomes a prime target for external attacks if vulnerabilities are present. This exposure underscores the importance of quickly addressing issues like CVE-2024-23692 to prevent malicious exploitation.