A server linked to a malware campaign attributed to a Midnight Blizzard-associated cluster was still delivering malicious files on October 5, 2026. The server returned HTTP 200 responses for multiple payload paths, including one used by simple Windows Internet Shortcut files to launch a PowerShell stager. The finding shows that public disclosure... Weiterlesen: Midnight Blizzard-Linked Malware Server Still Delivering Payloads 8 W…
Intelligence View
⚡ tsecurity.de Intelligence
Midnight Blizzard-Linked Malware Server Still Delivering Payloads 8 Weeks After Disclosure
A server linked to a malware campaign attributed to a Midnight Blizzard-associated cluster was still delivering malicious files on October 5, 2026. The server…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1059TA0002 · Execution
Command and Scripting Interpreter
Mitigation: M1038 Execution Prevention & Script Block Logging
Quelle: Kontext-Klassifikation des Artikeltextes
Execution
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
10 Quellen
Closing (matrix-conf-2026)
9 weitere Quellen
CChaos Computer Clubvor 19 Std.Widgets Working Group (matrix-conf-2026) CChaos Computer Clubvor 19 Std.A faster, rustier Element Web (matrix-conf-2026) CChaos Computer Clubvor 19 Std.Matrix as an App Backend: The perfect container for private structured Data (matrix-conf-2026) CChaos Computer Clubvor 19 Std.Common challenges for organizations when deploying [matrix] (matrix-conf-2026) CChaos Computer Clubvor 19 Std.Feature asymmetry in interoperable messaging - a barrier for mitigating network effects? (matrix-conf-2026) CChaos Computer Clubvor 19 Std.The Engineering Behind Matrix Notifications (matrix-conf-2026)
+3
9 Quellen
CVE-2026-83387 | Oracle GraalVM Enterprise Edition/GraalVM for JDK/Java SE JDBC improper authorization (Nessus ID 370276)
8 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2026-101516 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition Libraries improper authorization (WID-SEC-2026-4079) VVulDB Updatesvor 3 Std.CVE-2026-83376 | Oracle GraalVM Enterprise Edition/GraalVM for JDK/Java SE JSSE improper authorization (WID-SEC-2026-4079) VVulDB Updatesvor 3 Std.CVE-2026-83374 | Oracle GraalVM Enterprise Edition/GraalVM for JDK/Java SE Security privileges management (WID-SEC-2026-4079) VVulDB Updatesvor 3 Std.CVE-2026-83380 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition JAAS information disclosure (WID-SEC-2026-4079) VVulDB Updatesvor 3 Std.CVE-2026-83378 | Oracle Java SE 21.0.12.1/25.0.4.1/27 Compiler privileges management (WID-SEC-2026-4079) VVulDB Updatesvor 3 Std.CVE-2026-83381 | Oracle Java SE up to 27 Security privileges management (WID-SEC-2026-4079)
+2
6 Quellen
Making Matrix Feel Like WhatsApp Without Centralizing It
5 weitere Quellen
MMatrixdotorgvor 1 Std.Matrixdotorg: Making Matrix Feel Like WhatsApp Without Centralizing It CChaos Computer Clubvor 19 Std.When the Bridge Looks Like an Attacker: Building a Focus App on Matrix Instagram Bridges (matrix-conf-2026) CChaos Computer Clubvor 19 Std.Making Matrix Feel Like WhatsApp Without Centralizing It (matrix-conf-2026) MMatrixdotorgvor 1 Std.Matrixdotorg: When the Bridge Looks Like an Attacker: Building a Focus App on Matrix Instagram Bridges MMatrixdotorgvor 1 Std.Matrixdotorg: When the Bridge Looks Like an Attacker: Building a Focus App on Matrix Instagram Bridges
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4278479/it-security-nachrichten/midnight-blizzard-linked-malware-server-still-delivering-payloads-8-weeks-after-disclosure/