attack_type:backdoor × latest_source_host:feeds.fortinet.com × limpar

Resultados

2 casos · pág. 1/1

feeds.fortinet.com · há 1d high

QuickFox supply chain compromise trojanizes Windows app to deploy FDMTP implant, with technical overlap to Twill Typhoon

FortiGuard Incident Response reports a supply chain attack on the QuickFox Windows application, whose trojanized components deployed the FDMTP implant to users. QuickFox's user base is mainly Chinese international students and expats. Affected Windows versions are those later than v3.0.35 and earlier than v3.55.6. QuickFox has removed the…

Twill Typhoon education general consumers

feeds.fortinet.com · há 1d exploit público high

ClingSTUN Linux backdoor turns exploited IoT devices into proxy nodes via public STUN servers

FortiGuard Labs describes ClingSTUN, a Linux back-connect proxy backdoor that keeps persistent access and turns compromised devices into remotely controlled proxy nodes. It combines persistence, process termination, watchdog manipulation and remote command execution. It also uses legitimate public STUN servers for NAT traversal, to discov…

CVE-2026-87827 CVE-2026-36356 CVE-2025-67038