Exploited CVE-2020-10189 Zoho ManageEngine Desktop Central

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•2•0•24

Detects the exploitation of Zoho ManageEngine Desktop Central Java Deserialization vulnerability (CVE-2020-10189) by monitoring for suspicious child processes spawned by the Java executable associated with Desktop Central. This exploitation often leads to the execution of command-line utilities for further compromise.