/
ttps_attack:T1014 × criticity:high × limpar

Resultados

2 casos · pág. 1/1

securelist.com · high

APT41 deploys BlackX UEFI bootkit, a BlackLotus copycat exploiting Baton Drop, against Central Asian diplomatic agencies

Kaspersky GReAT identified an APT campaign in early 2026 targeting diplomatic agencies in Tajikistan, Uzbekistan and Turkmenistan. The attackers used a UEFI bootkit dubbed BlackX, which closely resembles BlackLotus and bypasses Secure Boot by exploiting Baton Drop (CVE-2022-21894). Kaspersky attributes the activity to APT41 with medium co…

CVE-2022-21894 CVE-2023-24932 APT41 FishMonger government diplomatic
thehackernews.com · · 2 fontes · 2 atualizações high

Attackers hijack 300+ Tor exit relays to intercept SSH password logins and deploy Ebury 1.8.3 backdoor

Attackers took over more than 300 Tor exit relays in early October 2026 and changed their exit policies so SSH (TCP port 22) traffic was redirected to 12 attacker-controlled interception servers that harvested passwords and attempted to install the Ebury 1.8.3 backdoor. Researcher kaba found 333 redirecting exits (roughly 10% of about 3,0…

technology telecommunications