Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants

Kaspersky Securelist threat intelligence covering active APT campaigns, malware families, ransomware, phishing infrastructure, cloud-based MFA bypasses, DNS tunneling, and regional cyber-espionage activity. Notable items include Head Mare exploiting an unpatched TrueConf server to deploy PhantomCore and PhantomGraph, Project CAV3RN using Google Apps Script and DNS-based C2, OctLurk and SilkLurk backdoors targeting Central Asia, GenieLocker ransomware affecting Windows/Linux/ESXi, and Mirage Kitten tools targeting the Middle East and Africa.