Cerberus

Cerberus is a type of malware, a harmful software designed to exploit and damage systems. It has been found to be associated with various platforms and versions of Siemens Cerberus PRO UL, including the Compact Panel FC922/924 and the Engineering Tool, all versions prior to MP4. Additionally, Cerberus was also discovered in multiple versions of the Siemens Cerberus PRO UL X300 Cloud Distribution, all versions before V4.3.0001. The malware can infect systems through suspicious downloads, emails, or websites, often without user knowledge, and once inside, it can steal personal information, disrupt operations, or even hold data hostage for ransom. A Cerberus sample (SHA-256 1249c4d3a4b499dc8a9a2b3591614966145daac808d440e5202335d9a4226ff8) was identified as being digitally code-signed with a generic Android certificate. This malware has been linked with other malicious programs such as Cobalt Strike, Meterpreter, DarkComet, and Empire Powershell. Moreover, it's been used in many Android-based banking Trojans like BianLian, Cerberus, and TeaBot, utilizing a method known as BadPack. To mitigate the risk from Cerberus, updates have been suggested for affected systems. For the Siemens Cerberus PRO UL Engineering Tool, Desigo Fire Safety UL Compact Panel FC2025/2050, and Desigo Fire Safety UL Engineering Tool, users should update to MP4 or later version. Similarly, for the Cerberus PRO UL X300 Cloud Distribution and Desigo Fire Safety UL X300 Cloud Distribution, an update to V4.3.0001 or later version is recommended. Successful exploitation of this malware requires an on-path attacker that intercepts the communication of the engineering tool in the fire system network. The possible impact is limited to the tool, not the underlying operating system, although code execution might be possible on the underlying OS with the privileges of the engineering tool user account.