Executive Summary Cyble has continued tracking GhostBat RAT activity targeting Android users in India since its initial identification in October 2025. Recent investigations into malicious mParivahan and eChallan-themed applications revealed a broader operator-controlled ecosystem that we track as GhostX. Analysis of the exposed GhostX backend... Weiterlesen: The GhostX Ecosystem: Forged in Transit, Licensed to Deceive
Intelligence View
⚡ tsecurity.de Intelligence
The GhostX Ecosystem: Forged in Transit, Licensed to Deceive
Executive Summary Cyble has continued tracking GhostBat RAT activity targeting Android users in India since its initial identification in October 2025. Recent…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
16 Quellen
CVE-2026-106207 | Google Chrome up to 154.0.8037.97 V8 race condition (WID-SEC-2026-3761)
15 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2026-106208 | Google Chrome up to 154.0.8037.97 improper authorization (WID-SEC-2026-3761) VVulDB Updatesvor 4 Std.CVE-2026-106209 | Google Chrome up to 154.0.8037.97 Mobile clickjacking (WID-SEC-2026-3761) VVulDB Updatesvor 4 Std.CVE-2026-106210 | Google Chrome up to 154.0.8037.97 Scroll information disclosure (WID-SEC-2026-3761) VVulDB Updatesvor 4 Std.CVE-2026-106213 | Google Chrome up to 154.0.8037.97 WebAudio race condition (WID-SEC-2026-3761) VVulDB Updatesvor 4 Std.CVE-2026-106212 | Google Chrome up to 154.0.8037.97 Autofill improper authorization (WID-SEC-2026-3761) VVulDB Updatesvor 4 Std.CVE-2026-106211 | Google Chrome up to 154.0.8037.97 TabStrip use after free (WID-SEC-2026-3761)
+9
13 Quellen
CVE-2026-72329 | Linux Kernel up to 7.1.4/7.2-rc2 liquidio liquidio_vf.c pcie_flr null pointer dereference
12 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-72395 | Linux Kernel up to 7.2-rc1 Hwmon Pmbus regulator_handle_critical event state issue VVulDB Updatesvor 2 Std.CVE-2026-72380 | Linux Kernel up to 7.1.4/7.2-rc1 xen/pvcalls class.c pvcalls_front_event_handler req_id out-of-bounds write VVulDB Updatesvor 2 Std.CVE-2026-72338 | Linux Kernel up to 7.2-rc2 act_pedit net/sched/act_pedit.c tcf_pedit_offload_act_setup tcfp_nkeys toctou VVulDB Updatesvor 2 Std.CVE-2026-72254 | Linux Kernel up to 7.2-rc1 netfilter nft_fib_validate null pointer dereference LLinux, GNU/Linux, free soft…vor 5 Std.The Linux 7.4 Merge Window Is Easily The Largest In Kernel History IIT Security Newsvor 4 Std.Critical Linux Kernel Vulnerability Could Allow Hackers to Gain Remote Root Access
+6
11 Quellen
CVE-2026-92162 | Flatpak up to 1.18.0 flatpak-system-helper privileges management (Nessus ID 374780)
10 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2026-96281 | Red Hat Enterprise Linux System Helper RemoveLocalRef privileges management (EUVD-2026-88027 / Nessus ID 374780) VVulDB Updatesvor 1 Std.CVE-2026-66069 | RabbitMQ up to 4.1.12/4.2.6/4.2.x Management Plugin rabbit_mgmt_wm_reset.erl is_authorized privileges management (WID-SEC-2026-2268) VVulDB Updatesvor 1 Std.CVE-2026-66067 | VMware RabbitMQ up to 4.2.6/4.3.0 Stream Open privileges management VVulDB Updatesvor 3 Std.CVE-2026-65959 | vitessio Vitess up to 24.0.2 Debug Endpoint vrlog.go vrlogStatsHandler privileges management VVulDB Updatesvor 3 Std.CVE-2026-81627 | Red Hat Enterprise Linux VAPIC hw/i386/vapic.c privileges management (EUVD-2026-82872) VVulDB Updatesvor 3 Std.CVE-2026-69399 | Microsoft Azure Arc privileges management
+4
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4273194/it-security-nachrichten/the-ghostx-ecosystem-forged-in-transit-licensed-to-deceive/