ttps_attack:T1059.007 × latest_source_host:feeds.fortinet.com × limpar

Resultados

2 casos · pág. 1/1

feeds.fortinet.com · há 1d high

QuickFox supply chain compromise trojanizes Windows app to deploy FDMTP implant, with technical overlap to Twill Typhoon

FortiGuard Incident Response reports a supply chain attack on the QuickFox Windows application, whose trojanized components deployed the FDMTP implant to users. QuickFox's user base is mainly Chinese international students and expats. Affected Windows versions are those later than v3.0.35 and earlier than v3.55.6. QuickFox has removed the…

Twill Typhoon education general consumers

feeds.fortinet.com · há 1d high

Global campaign uses obfuscated JScript droppers and a disguised .ttf Lua loader to deliver Snake Keylogger, Formbook and AgentTesla

FortiGuard Labs describes a large-scale, global campaign that uses heavily obfuscated JScript droppers to launch an AutoIt/Lua-based loader with low detection rates. The loader delivers several popular RATs and infostealers, including a version of Snake Keylogger. The infection chain relies on business email compromise tactics, impersonat…