◆ Cyberattacks launched by threat actors against Veeam Backup & Replication (VBR) are rising, the Health Sector Cybersecurity Coordination Center (HC3) is warning. VBR is a software product created by Veeam Software that is used to back up, replicate and restore data on virtual machines. "What makes this threat significant is that in addition to backing up and recovering [virtual machines], it is used to protect and restore individual files and applications for environments such as Microsoft Exchange and SharePoint," HC3 said, noting that these are used in the health care sector. "Veeam Backup & Replication also has the ability to provide transaction-level restores of Oracle and Microsoft [structured query language] SQL databases," HC3 said. In late March 2023, the agency said, threat researchers identified attacks carried out by at least one threat actor group, FIN7, against internet-facing servers running VBR software. FIN7 is a threat actor group that was discovered in the mid-2010s, HC3 said.