A malicious WhatsApp attachment is being used to deploy a Windows remote access trojan that can reach SYSTEM-level access, giving its operators deep control over infected machines. The campaign begins with a ZIP archive carrying a financial-document lure and an executable named Statement.exe. Once the recipient opens the file, the malware starts a... Weiterlesen: WhatsApp Attachment Deploys Malware That Gains SYSTEM Access on Windows
Intelligence View
⚡ tsecurity.de Intelligence
WhatsApp Attachment Deploys Malware That Gains SYSTEM Access on Windows
A malicious WhatsApp attachment is being used to deploy a Windows remote access trojan that can reach SYSTEM-level access, giving its operators deep control…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
29 Quellen
CVE-2026-90154 | Linux Kernel ksmbd ksmbd_all_conn_set_status race condition (WID-SEC-2026-3444)
28 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2026-90155 | Linux Kernel up to 7.2.5 ksmbd __ksmbd_close_fd flc_blocked_requests use after free (WID-SEC-2026-3444) VVulDB Updatesvor 3 Std.CVE-2026-90156 | Linux Kernel up to 7.2.5 ksmbd vfs_lock_file conn null pointer dereference (WID-SEC-2026-3444) VVulDB Updatesvor 3 Std.CVE-2026-90159 | Linux Kernel up to 6.12.109/6.18.51/7.2.5 BPF _bpf_setsockopt/_bpf_getsockopt race condition (WID-SEC-2026-3444) VVulDB Updatesvor 3 Std.CVE-2026-90158 | Linux Kernel up to 6.6.156/6.12.109/6.18.51/7.2.5 nfcon nfcon_device deadlock (WID-SEC-2026-3444) VVulDB Updatesvor 3 Std.CVE-2026-90161 | Linux Kernel up to 6.18.51/7.2.5 erofs out-of-bounds (WID-SEC-2026-3444) VVulDB Updatesvor 3 Std.CVE-2026-90162 | Linux Kernel up to 7.2.5 ksmbd smb2_lock use after free (WID-SEC-2026-3444)
+22
23 Quellen
CVE-2025-67526 | ThimPress Sailing Plugin up to 4.4.6 on WordPress php file inclusion
22 weitere Quellen
VVulDB Updatesvor 6 Std.CVE-2025-66532 | Mikado-Themes Powerlift Plugin up to 3.2.1 on WordPress authorization VVulDB Updatesvor 6 Std.CVE-2025-67531 | trippleS Turitor Plugin up to 1.5.3 on WordPress php file inclusion VVulDB Updatesvor 6 Std.CVE-2025-67529 | Opal_WP Fashion Plugin up to 5.3.0 on WordPress php file inclusion VVulDB Updatesvor 6 Std.CVE-2025-67527 | trippleS Digiqole Plugin up to 2.2.7 on WordPress php file inclusion VVulDB Updatesvor 6 Std.CVE-2025-67525 | Opal_WP ekommart Plugin up to 4.3.1 on WordPress php file inclusion VVulDB Updatesvor 6 Std.CVE-2025-67521 | Select-Themes Select Core Plugin up to 2.6 on WordPress php file inclusion
+16
14 Quellen
CVE-2026-106062 | GIMP DDS Loader out-of-bounds write (EUVD-2026-93983 / Nessus ID 371935)
13 weitere Quellen
VVulDB Updatesvor 5 Std.CVE-2022-47881 | Foxit PDF Reader/PDF Editor up to 11.2.1.53537 out-of-bounds (EUVD-2022-50638) VVulDB Updatesvor 4 Std.CVE-2022-47940 | Linux Kernel up to 5.18.17 ksmbd fs/ksmbd/smb2pdu.c smb2_write information disclosure (EUVD-2022-50673 / Nessus ID 249854) VVulDB Updatesvor 4 Std.CVE-2026-108127 | Microsoft Windows up to Server 2025 DNS Server out-of-bounds (EUVD-2026-100446) VVulDB Updatesvor 4 Std.CVE-2026-97844 | Microsoft Windows up to Server 2025 out-of-bounds (EUVD-2026-100445) VVulDB Updatesvor 4 Std.CVE-2026-97842 | Microsoft Windows up to Server 2025 DNS Server out-of-bounds (EUVD-2026-100443) VVulDB Updatesvor 4 Std.CVE-2026-97843 | Microsoft Windows up to Server 2025 DNS Server out-of-bounds (EUVD-2026-100444)
+7
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4268183/malware-trojaner-viren/whatsapp-attachment-deploys-malware-that-gains-system-access-on-windows/