PhantomCore – CyberSecurityBoard

Malware

Head Mare Exploits TrueConf Server Flaws to Replace Client Installers with PhantomCore Backdoor

Russian cybersecurity vendor Kaspersky has uncovered a new attack campaign by the threat actor known as Head Mare, targeting unpatched TrueConf videoconferencing…

APT backdoor BDU-2025-10116 BDU:2025-10114

August 10, 2026

Attack Groups

Head Mare: Threat Actor Exploiting TrueConf Flaws

Head Mare is a threat actor that has been observed exploiting vulnerabilities in TrueConf servers to deliver backdoors and remote access trojans.…

Head Mare PhantomCore PhantomGraph Russia

August 10, 2026

Malware

PhantomCore: Backdoor and RAT Delivered via TrueConf Installers

PhantomCore is a backdoor and remote access trojan (RAT) delivered through poisoned TrueConf client installers. It is part of an attack chain…

backdoor Head Mare PhantomCore RAT

August 10, 2026