Hackers have exploited a feature in Triofox antivirus software to deploy remote access tools (RATs), posing significant security risks to users. Triofox, designed to protect endpoints, has a vulnerability that attackers are leveraging to bypass security measures and gain unauthorized access to systems. This abuse allows threat actors to remotely control infected machines, steal sensitive data, and potentially launch further attacks within compromised networks. The incident highlights the evolving tactics of cybercriminals who manipulate legitimate security software features for malicious purposes. Users and organizations relying on Triofox are urged to update their software promptly and implement additional security layers to mitigate this threat. Cybersecurity experts recommend monitoring network traffic for unusual activities and employing endpoint detection and response (EDR) solutions to detect and respond to such intrusions effectively. This case underscores the importance of continuous security assessments and the need for vigilance against sophisticated attack vectors exploiting trusted software components.
This Cyber News was published on www.bleepingcomputer.com. Publication date: Tue, 11 Nov 2025 20:05:19 +0000