Browsing: Persistence

Essential Insights Threat actors used malicious photo-themed ZIP archives and fake shortcuts to deploy obfuscated…

Essential Insights The Evooo1Bot Linux botnet leverages Mirai code, using known vulnerabilities (e.g., CVE-2021-46422, CVE-2025-55583)…

Quick Takeaways Threat actors are actively exploiting the CVE-2026-59310 directory-traversal vulnerability in VMware vCenter to…

Summary Points Malware in a signed-in Windows session can silently hijack Windows Hello for Business…

Summary Points DOUBLECUP uses steganographic PNG images and environmental keying for malware delivery, enabling covert,…

Quick Takeaways The Larva-24009 actor primarily uses phishing emails with decoy documents and LNK malware…

Summary Points Attackers used hijacked hotel Wi-Fi captive portals to deliver CornFlake, a RAT capable…

Fast Facts Attackers use a multi-stage chain involving a Go-based loader (HollowFrame) and Rust-based backdoor…

Fast Facts Threat actors, linked to TA488, exploit a zero-day vulnerability in Microsoft Outlook Web…

Quick Takeaways Tengu, a Mirai-derived botnet, exploits Linux devices’ hardware watchdogs and persistence mechanisms, including…