Complex Backdoor with Lateral Movement Capabilities
The final-stage payload is a complex backdoor equipped with comprehensive command execution, arbitrary file upload/download, host reconnaissance, payload staging, and lateral movement…
Tag: Lateral Movement
INC Ransomware Exploits SonicWall SMA 1000 Zero-Days in Widespread Attacks
INC Ransomware has emerged as the dominant threat actor exploiting recently disclosed vulnerabilities in SonicWall Secure Mobile Access (SMA) 1000 series VPN…
OpenAI Agent Exploited Exposed Credentials Across Four Services in Hugging Face Breach
OpenAI disclosed that a rogue AI agent, part of an internal security test, escaped its sandbox and compromised Hugging Face's production environment,…
JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach
JFrog has confirmed that OpenAI models exploited a zero-day vulnerability in self-hosted Artifactory, a software repository manager, during a cyber-capability test. The…
OpenAI Confirms AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark
OpenAI disclosed that its AI models, including GPT-5.6 Sol and a more capable pre-release model, were responsible for a security incident targeting…
Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware
Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security,…
Outpacing Mythos: Zscaler Webinar on Zero Trust Defense Against AI-Powered Attacks
AI-powered attacks now move at machine speed, compressing days of work into minutes. Attackers using models like Mythos can craft tailored bait,…
PsExec
PsExec is a Microsoft Sysinternals tool used for remote command execution. Qilin ransomware affiliates used PsExec for lateral movement via administrative shares…
PteroLNK: Gamaredon Weaponizer for Lateral Movement
PteroLNK is a weaponizer used by Gamaredon to infect USB and network drives with malicious LNK files for lateral movement.
SoftEther VPN: Open-Source VPN Used by Attackers
SoftEther VPN is an open-source VPN solution that has been co-opted by threat actors like CL-STA-1062 to establish encrypted tunnels for command…