A newly tracked intrusion set, STAC4924, is using TerminalFix social-engineering lures to deploy the Lorem Ipsum Loader and establish covert reverse tunnels into enterprise environments. The activity shifts the familiar ClickFix model from the Windows Run dialog to Windows Terminal, increasing the likelihood that victims execute complex PowerShell... Weiterlesen: TerminalFix Attacks Deploy Lorem Ipsum Loader to Create Covert Tunnel…
Intelligence View
⚡ tsecurity.de Intelligence
TerminalFix Attacks Deploy Lorem Ipsum Loader to Create Covert Tunnels Into Corporate Networks
A newly tracked intrusion set, STAC4924, is using TerminalFix social-engineering lures to deploy the Lorem Ipsum Loader and establish covert reverse tunnels…
IT Security Nachrichten GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit TA0002 · T1059
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1059TA0002 · Execution
Command and Scripting Interpreter
Mitigation: M1038 Execution Prevention & Script Block Logging
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
Execution
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
81 Quellen
CVE-2026-90164 | Linux Kernel up to 7.2.5 ksmbd ksmbd_server_init allocation of resources (WID-SEC-2026-3444)
80 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2026-90166 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 ksmbd smb/server ksmbd_ipc_tree_connect_request null pointer dereference (WID-SEC-2026-3444) VVulDB Updatesvor 3 Std.CVE-2026-90165 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd ksmbd_stop_durable_scavenger null pointer dereference (WID-SEC-2026-3444) VVulDB Updatesvor 3 Std.CVE-2026-90168 | Linux Kernel up to 7.2.5 ksmbd ksmbd_free_work_struct improper synchronization (WID-SEC-2026-3444) VVulDB Updatesvor 3 Std.CVE-2026-90167 | Linux Kernel up to 7.2.5 ksmbd test_and_set_bit race condition (WID-SEC-2026-3444) VVulDB Updatesvor 3 Std.CVE-2026-90169 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd memory leak (WID-SEC-2026-3444) VVulDB Updatesvor 3 Std.CVE-2026-90170 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 ksmbd ipc_validate_msg out-of-bounds (WID-SEC-2026-3444)
+74
23 Quellen
CVE-2025-64213 | StylemixThemes MasterStudy LMS Pro Plugin up to 4.7.16 on WordPress insertion of sensitive information into sent data
22 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2025-60182 | Schiocco Support Board Plugin up to 3.8.7 on WordPress cross site scripting VVulDB Updatesvor 3 Std.CVE-2025-64193 | 8theme XStore Plugin up to 9.6.1 on WordPress php file inclusion VVulDB Updatesvor 3 Std.CVE-2025-64376 | CridioStudio ListingPro Plugin up to 2.9.10 on WordPress cross site scripting VVulDB Updatesvor 3 Std.CVE-2025-64189 | 8theme XStore Core Plugin up to 5.6 on WordPress cross site scripting VVulDB Updatesvor 1 Std.CVE-2026-34885 | David Lingren Media LIbrary Assistant Plugin up to 3.34 on WordPress sql injection VVulDB Updatesvor 7 Std.CVE-2025-67526 | ThimPress Sailing Plugin up to 4.4.6 on WordPress php file inclusion
+16
13 Quellen
CVE-2026-97839 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100440)
12 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2026-97838 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100439) VVulDB Updatesvor 4 Std.CVE-2026-97837 | Microsoft Windows up to Server 2025 information disclosure (EUVD-2026-100438) VVulDB Updatesvor 4 Std.CVE-2026-97836 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100437) VVulDB Updatesvor 4 Std.CVE-2026-97835 | Microsoft Windows up to Server 2025 DNS Server information disclosure (EUVD-2026-100436) VVulDB Updatesvor 4 Std.CVE-2026-97834 | Microsoft Windows up to Server 2025 information disclosure (EUVD-2026-100435) VVulDB Updatesvor 5 Std.CVE-2026-108127 | Microsoft Windows up to Server 2025 DNS Server out-of-bounds (EUVD-2026-100446)
+6
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4222330/it-security-nachrichten/terminalfix-attacks-deploy-lorem-ipsum-loader-to-create-covert-tunnels-into-corporate-networks/