Cyber CrimeBackdoors Hide Behind Email Security Brands
Rapid7 says Linux implants in South Korea and Taiwan impersonate SpamSniper and ShareTech to slip past defenders.
> Search
26 results for “backdoor”
Cyber Crime
Cyber CrimeClingSTUN Backdoor Turns Linux Hosts Into Proxies
FortiGuard Labs details a Linux backdoor that abuses public STUN servers, exploits two dozen flaws, and self-propagates across routers.
SecurityFake Zoom Installer Delivers macOS Backdoor
Researchers at Jamf say a bogus Zoom app installs CloudSyncD, a backdoor that abuses user passwords to run with root privileges.
Cyber CrimeAntino Backdoor Hides C2 in Outlook, OneDrive
A China-nexus actor is using Microsoft 365 mailboxes and cloud storage as dead drops to command a Rust-compiled Windows backdoor, Talos reports.
AI & MLCan You Trust a Model You Can't Inspect?
Open-weight AI brings hidden model risks to enterprises, and the liability may land on the CSO.
Cyber CrimeJade Sleet's macOS backdoors hit IT vendor
SentinelOne tied North Korea's Jade Sleet to an India-based IT services breach that deployed two Rust macOS backdoors on a DevOps engineer's MacBook.
Cyber CrimeThree Clusters Hit Russian Firms
Kaspersky details NightEagle, Hacking Cat and Toy Ghouls deploying backdoors, ransomware and wipers against Russian enterprises.
Cyber CrimeMeshCentral Backdoor Hid Inside 3BB Network
Hunt.io says an attacker used a legitimate remote-management tool to hold root access inside Thailand's 3BB and target subscriber credentials.
Cyber CrimeArtifactory Flaws Chained Into Admin Backdoors
Wiz reports attackers chained two Artifactory token flaws to seize admin control and plant backdoors, while a third flaw was exploited separately.
SecurityAdobe Commerce bug exploited before hotfix
Sansec reports active attacks on a max-severity Magento flaw, with backdoors and secondary access found.
SecurityZero-Day Backdoor Campaign Targets Magento Stores
Unpatched flaw lets attackers plant persistent backdoors on Magento and Adobe Commerce servers without login.
SecurityHAProxy Trojans Hide in South Korean Load Balancers
A Linux toolkit compiled into HAProxy binaries intercepts traffic for two South Korean firms, likely via state actors.
SecurityPostgreSQL backup accounts open 12-year backdoor
A 12-year-old PostgreSQL flaw lets low-privilege replication accounts gain superuser access and remote code execution across platforms.
SecurityAPT28's HOOKEDGE Backdoor Refines Espionage Tactics
New HOOKEDGE backdoor targets European governments, evolving from HEADLACE to evade defenses.
SecurityGrid Order Targets Foreign Backdoors
Executive Order 14420 bars risky foreign grid gear, empowering DOE to vet or remove equipment.
Cyber CrimeTortoiseshell Expands Toolset With Backdoor, SSH Tunnel
Iran-linked Tortoiseshell adds reverse SSH tunneling and a C++ backdoor, with new infrastructure hinting at wider targeting.
Cyber CrimeTeams Helpdesk Scam Spreads SynkLoader Backdoor
Cybercriminals are using fake IT helpdesk messages on Microsoft Teams to deliver a new backdoor malware, researchers warn.
SecurityQUICSILVER campaign strings decoy PDFs to drop Go backdoor
A China-nexus espionage campaign targets Myanmar government and IT sectors via graduation invites, deploying QUICAgent.
SecurityTrojan npm Packages Drop AI-Powered Linux Backdoor
Researchers uncover 14 malicious npm packages delivering RedC2 4.0, an AI-assisted Linux backdoor, via stealthy loader.
SecurityCentral Asia Targeted by New Backdoors
Researchers are tracking a sophisticated campaign against Central Asian governments involving custom OctLurk and SilkLurk malware.
Cyber CrimeGoSerpent Malware’s Deep State Intrusion
A newly identified backdoor is enabling long-term espionage against Southeast Asian government and diplomatic networks.
SecurityGovernment Domains Weaponized by Malware
Researchers have discovered a campaign using hijacked Brazilian government websites and authenticated emails to distribute malware.
SecurityDaxin Malware Returns via Stealth Portal
A legacy rootkit reappears in Taiwan alongside a sophisticated new backdoor that executes commands from the Windows logon screen.
SecurityGigaWiper Convergence: A New Era of Modular Destructive Backdoors
Microsoft identifies a sophisticated new malware strain that fuses espionage and permanent data destruction into a single, unified tool.
SecurityGigaWiper: A Swiss Army Knife of Digital Destruction
Microsoft identifies a sophisticated new Windows backdoor that merges multiple ransomware and data-wiping tools into one modular threat.
SecurityHow RedHook Turns Android's Developer Settings Into an Open Backdoor
A newly upgraded RedHook Android malware variant exploits wireless debugging settings to gain high-level shell privileges without root.