An espionage campaign targeting government organizations across the Commonwealth of Independent States (CIS), with additional interest in water, environmental, and energy sectors. The investigation found four infection chains active from June 2025 through 2026. The attackers used macro-enabled Word documents, PS2EXE-built executables, malicious... Weiterlesen: UAT-6275 Hackers Use WinRAR Exploit and GitHub PowerShell to Target C…
Intelligence View
⚡ tsecurity.de Intelligence
UAT-6275 Hackers Use WinRAR Exploit and GitHub PowerShell to Target CIS Governments
An espionage campaign targeting government organizations across the Commonwealth of Independent States (CIS), with additional interest in water, environmental,…
Hacking & Pentesting GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit TA0002 · T1059 Gov & Defense
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1059TA0002 · Execution
Command and Scripting Interpreter
Mitigation: M1038 Execution Prevention & Script Block Logging
Quelle: Kontext-Klassifikation des Artikeltextes
Execution
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
21 Quellen
CVE-2026-111906 | thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha Elasticsearch/OpenSearch Administration API cross-site request forgery (EUVD-2026-103314)
20 weitere Quellen
VVulDB Updatesvor 5 Std.CVE-2026-111905 | thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha {userId} userId resource injection (EUVD-2026-103315) VVulDB Updatesvor 5 Std.CVE-2026-111904 | thorsten phpMyFAQ 4.2.0-alpha Open Question Controller /api/v4.0/open-questions OpenQuestionController information disclosure (EUVD-2026-103316) VVulDB Updatesvor 5 Std.CVE-2026-111903 | thorsten phpMyFAQ 4.2.0-alpha SvgSanitizer cross site scripting (EUVD-2026-103317) VVulDB Updatesvor 5 Std.CVE-2026-111894 | thorsten phpMyFAQ up to 4.1.8/4.2.0-alpha cleanUpContent cross site scripting (EUVD-2026-103325) VVulDB Updatesvor 5 Std.CVE-2026-111893 | Thorsten phpMyFAQ 4.2.0-alpha GroupController category-restrictions saveCategoryRestrictions categoryIds privileges management (EUVD-2026-103326) VVulDB Updatesvor 5 Std.CVE-2026-111892 | thorsten phpMyFAQ up to 4.2.0-alpha.2 Rate Limiting allocation of resources (EUVD-2026-103327)
+14
7 Quellen
CVE-2026-92883 | GitLab up to 19.2.7/19.3.4/19.4.1 HTML Attributes HTML injection (Nessus ID 366859)
6 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-85529 | GitLab up to 19.2.7/19.3.4/19.4.1 GraphQL API improper authorization (Nessus ID 366858) VVulDB Updatesvor 2 Std.CVE-2026-100755 | GitLab up to 19.2.7/19.3.4/19.4.1 Package Registry privileges management (Nessus ID 366855 / WID-SEC-2026-3858) VVulDB Updatesvor 2 Std.CVE-2026-14210 | GitLab up to 19.2.7/19.3.4/19.4.1 Labels improper authorization (Nessus ID 366853) VVulDB Updatesvor 3 Std.CVE-2026-92528 | GitLab up to 19.2.7/19.3.4/19.4.1 privileges management (Nessus ID 366866) VVulDB Updatesvor 3 Std.CVE-2026-101168 | GitLab up to 19.2.7/19.3.4/19.4.1 Pages information disclosure (Nessus ID 366862 / WID-SEC-2026-3858) VVulDB Updatesvor 5 Std.CVE-2026-96893 | GitLab up to 19.2.7/19.3.4/19.4.1 AI Conversation Context Construction neutralization (Nessus ID 366872)
6 Quellen
CVE-2026-111931 | Coder up to 2.34.7 handleAPIKeySmuggling r.URL.Path redirect (EUVD-2026-103298)
5 weitere Quellen
VVulDB Updatesvor 11 Std.CVE-2026-111932 | Coder up to 2.29.16/2.32.6/2.33.7/2.34.1 Settings cross site scripting (EUVD-2026-103299) VVulDB Updatesvor 11 Std.CVE-2026-111930 | Coder up to 2.34.7 ACL improper authorization (EUVD-2026-103297) VVulDB Updatesvor 11 Std.CVE-2026-111929 | Coder up to 2.34.7 gRPC DownloadFile uuid authorization (EUVD-2026-103296) VVulDB Updatesvor 11 Std.CVE-2026-111928 | Coder up to 2.34.7 Acl Allow Rule coderd/rbac/policy.rego improper authorization (EUVD-2026-103295) VVulDB Updatesvor 11 Std.CVE-2026-111926 | Coder up to 2.34.7 Debug HTTP Server information disclosure (EUVD-2026-103293)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4270422/hacking-pentesting/uat-6275-hackers-use-winrar-exploit-and-github-powershell-to-target-cis-governments/