/
ttps_attack:T1071.001 × latest_source_host:gbhackers.com × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · high

UNC7017 hijacks AOMEI update infrastructure to deliver CROSSROAD downloader and SHINYROAD backdoor

A supply chain campaign tracked as UNC7017 hijacked the update infrastructure of AOMEI Technology between April and July 2026 to distribute the CROSSROAD downloader and the SHINYROAD backdoor through AOMEI Backupper and AnyViewer update workflows. The attackers tampered with server configurations only briefly, then restored legitimate con…

gbhackers.com · high

APT28 (Swallowtail) uses Hookedge backdoor and SSH tunnel in months-long intrusion at NATO shipbuilder

Swallowtail (also tracked as APT28, Fancy Bear and Forest Blizzard), a Russian espionage group linked by the U.S. government to the GRU, targeted organizations in two NATO member states. Victims included a law enforcement agency, a naval shipbuilder and a manufacturer of military aircraft engines. Symantec's Threat Hunter Team reported th…