R1Soft Server Backup Manager Vulnerability Exploited to Deploy Backdoor

During a recent incident response case, Fox-IT found evidence that the R1Soft vulnerability was exploited to gain initial access to a server. The attackers then deployed a malicious database driver that gave them backdoor access.