MinIO: Object Storage
MinIO is used by GigaWiper for data exfiltration, appearing as normal storage traffic.
Category: Cyber Products
Cybersecurity products, tools, platforms and software categories.
Fortinet FortiWeb Web Application Firewall
FortiWeb is a web application firewall by Fortinet, associated with CVE-2025-64446 used as a lure in the ChocoPoC campaign.
Check Point VPN Solution
Check Point VPN is a virtual private network solution, associated with CVE-2026-50751 used as a lure in the ChocoPoC campaign.
Joomla SP Page Builder Plugin
Joomla SP Page Builder is a page builder plugin for Joomla, associated with CVE-2026-48908 used as a lure in the ChocoPoC campaign.
Microsoft SharePoint Server
SharePoint Server is a web-based collaboration platform by Microsoft. Multiple critical vulnerabilities (CVE-2026-56164, CVE-2026-32201, CVE-2026-45659, CVE-2026-55040) were patched in July 2026, with…
Velociraptor: Tool Used by Storm-2603 to Blend Malicious Activity
Velociraptor was deployed by Storm-2603 to blend malicious activity with trusted administrative behavior during ransomware attacks.
Visual Studio Code: Lightweight Code Editor
Visual Studio Code is a free, open-source code editor developed by Microsoft, supporting extensions and integrated development features. It has adopted similar…
NSecKrnl.sys: Vulnerable Driver Used to Tamper with Endpoint Security
A vulnerable driver (NSecKrnl.sys) was used by Storm-2603 as a conduit to tamper with endpoint security protections and reduce visibility.
Gladinet Triofox: Exploited via CVE-2025-11371 for Initial Access
Gladinet Triofox was exploited via CVE-2025-11371 (CVSS 9.1) by Storm-2603, allowing probing for local file inclusion.
Argo CD: Kubernetes Deployment Tool
A popular GitOps tool for deploying applications to Kubernetes clusters. It uses a repo-server component to read Git repositories and generate Kubernetes…