MeshCentral Backdoor

3BB Broadband Provider Compromised via MeshCentral Backdoor for Root Access

An attacker operated inside the network of 3BB, one of Thailand's largest broadband providers, and maintained remote control of internal machines using a legitimate management tool called MeshCentral, according to threat intelligence firm Hunt.io. The intrusion was discovered after the attacker left a server open on the internet, which exposed the attacker's own tools and a list of credentials. The full scope of compromised subscriber data remains unverified.