Technology ❯ Cybersecurity ❯ Threat Actors

Malware

Exploitation Techniques Remote Access Tools PHP Backdoors Overstep ImageIO Vulnerability Supershell Social Engineering Remote Access Trojans Trojanized Software VShell Payment Skimmers

CISA Flags BeyondTrust RCE as Used in Ransomware Attacks

Active attacks focus on unpatched BeyondTrust remote access products, with investigators reporting web shells, backdoors, and data theft.

Mandiant Links AI-Driven Crypto Theft to North Korea’s UNC1069 With Seven macOS Malware Families

North Korea–Linked Group Uses Deepfake Calls to Infect Crypto Workers’ Macs

Trust Wallet Ties $8.5 Million Chrome Extension Theft to Shai-Hulud Supply-Chain Breach

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

Unpatched Gogs Zero-Day Is Under Active Exploitation, 700+ Servers Compromised

Mandiant Says Hackers Exploit Triofox Flaw to Create Admin Accounts and Execute Code

AI Pentest Tool 'Villager' Nears 11,000 PyPI Downloads as Researchers Flag Abuse Risk

HexStrike‑AI Attracts Criminal Use as Citrix NetScaler Zero‑Days Face Rapid Exploitation

SonicWall Blames Patched CVE-2024-40766 for Akira Ransomware Attacks

Active Zero-Day Exploit of WordPress Alone Theme Sees Over 120,000 Blocked Attempts