Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants

Kaspersky Securelist RSS feed covering recent cyber threats, including APT exploitation of unpatched TrueConf servers to deliver PhantomCore and PhantomGraph, Google Apps Script and DNS-based command-and-control, adversary-in-the-middle phishing that bypasses MFA through legitimate cloud platforms, tailored espionage backdoors targeting Central Asia and the Middle East/Africa, and GenieLocker ransomware affecting Windows, Linux, and ESXi. The feed also includes quarterly malware statistics and defensive analyses of Kerberoasting and DNS tunneling.