attack_type:supply_chain × criticity:high × latest_source_host:feeds.fortinet.com × limpar

Resultados

2 casos · pág. 1/1

feeds.fortinet.com · há 1d high

QuickFox supply chain compromise trojanizes Windows app to deploy FDMTP implant, with technical overlap to Twill Typhoon

FortiGuard Incident Response reports a supply chain attack on the QuickFox Windows application, whose trojanized components deployed the FDMTP implant to users. QuickFox's user base is mainly Chinese international students and expats. Affected Windows versions are those later than v3.0.35 and earlier than v3.55.6. QuickFox has removed the…

Twill Typhoon education general consumers

feeds.fortinet.com · há 1d high

Shai Hulud persistence on Jenkins host leads to AWS IAM escalation and Redshift data warehouse breach

FortiGuard Labs describes an intrusion in which a compromised Jenkins EC2 build host, tied to Shai Hulud persistence, was used to steal instance role credentials via IMDS and pivot into the victim's AWS environment. The actor used the credentials from external IPs, created an admin IAM user named cloudops-monitor, opened network paths to …