Chinese hackers use new Atlas RAT malware in European cyberattacks
2026-06-04T07:23:29Z•72d4cbbf5cdaf1f25b6b4e4a106d6cbbd93922ba003693feb3fed23a28d0b889
APTATGAcerAndroidAtlasCVE-2026-8206DoSEDR-evasion','ai-built-ransomware','WeedHackHTTP/2KirkiLinuxOFACRATWave7WordPressbackdoorcritical-infrastructurecryptocurrencyexploitfuel-tankmalwareransomwaresanctionsvulnerabilityzero-day
What happened
BleepingComputer's June 2–3, 2026 feed reports multiple active and emerging threats: a Chinese-speaking group deploying a new Atlas RAT/backdoor in European intrusions; OFAC sanctions against Nobitex for facilitating ransomware/terror-related payments; CISA/FBI/NSA warnings about attacks on internet-exposed fuel tank (ATG) monitoring systems and active exploitation of Android and Linux vulnerabilities; a new single-host HTTP/2 “Bomb” DoS that can crash servers quickly; multiple high-severity zero-days (including Wave 7 Acer router flaws) and a VS Code zero-day able to steal GitHub tokens; a CR
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 72d4cbbf5cdaf1f25b6b4e4a106d6cbbd93922ba003693feb3fed23a28d0b889
- Enrichment time
- 2026-06-04T07:23:29Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.