A server linked to a malware campaign attributed to a Midnight Blizzard-associated cluster was still delivering malicious files on October 5, 2026. The server returned HTTP 200 responses for multiple payload paths, including one used by simple Windows Internet Shortcut files to launch a PowerShell stager. The finding shows that public disclosure... Weiterlesen: Midnight Blizzard-Linked Malware Server Still Delivering Payloads 8 W…
Intelligence View
⚡ tsecurity.de Intelligence
Midnight Blizzard-Linked Malware Server Still Delivering Payloads 8 Weeks After Disclosure
A server linked to a malware campaign attributed to a Midnight Blizzard-associated cluster was still delivering malicious files on October 5, 2026. The server…
Malware / Trojaner / Viren GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit TA0002 · T1059
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1059TA0002 · Execution
Command and Scripting Interpreter
Mitigation: M1038 Execution Prevention & Script Block Logging
Quelle: Kontext-Klassifikation des Artikeltextes
Execution
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
12 Quellen
CVE-2026-106207 | Google Chrome up to 154.0.8037.97 V8 race condition (WID-SEC-2026-3761)
11 weitere Quellen
VVulDB Updatesvor 5 Std.CVE-2026-106209 | Google Chrome up to 154.0.8037.97 Mobile clickjacking (WID-SEC-2026-3761) VVulDB Updatesvor 5 Std.CVE-2026-106210 | Google Chrome up to 154.0.8037.97 Scroll information disclosure (WID-SEC-2026-3761) VVulDB Updatesvor 5 Std.CVE-2026-106213 | Google Chrome up to 154.0.8037.97 WebAudio race condition (WID-SEC-2026-3761) VVulDB Updatesvor 5 Std.CVE-2026-106211 | Google Chrome up to 154.0.8037.97 TabStrip use after free (WID-SEC-2026-3761) VVulDB Updatesvor 5 Std.CVE-2026-106214 | Google Chrome up to 154.0.8037.97 Proxy information disclosure (WID-SEC-2026-3761) VVulDB Updatesvor 5 Std.CVE-2026-106215 | Google Chrome up to 154.0.8037.97 ANGLE uninitialized resource (WID-SEC-2026-3761)
+5
9 Quellen
CVE-2026-92162 | Flatpak up to 1.18.0 flatpak-system-helper privileges management (Nessus ID 374780)
8 weitere Quellen
VVulDB Updatesvor 2 Std.CVE-2026-96281 | Red Hat Enterprise Linux System Helper RemoveLocalRef privileges management (EUVD-2026-88027 / Nessus ID 374780) VVulDB Updatesvor 2 Std.CVE-2026-66069 | RabbitMQ up to 4.1.12/4.2.6/4.2.x Management Plugin rabbit_mgmt_wm_reset.erl is_authorized privileges management (WID-SEC-2026-2268) VVulDB Updatesvor 2 Std.CVE-2026-66067 | VMware RabbitMQ up to 4.2.6/4.3.0 Stream Open privileges management VVulDB Updatesvor 4 Std.CVE-2026-65959 | vitessio Vitess up to 24.0.2 Debug Endpoint vrlog.go vrlogStatsHandler privileges management VVulDB Updatesvor 4 Std.CVE-2026-81627 | Red Hat Enterprise Linux VAPIC hw/i386/vapic.c privileges management (EUVD-2026-82872) VVulDB Updatesvor 4 Std.CVE-2026-69399 | Microsoft Azure Arc privileges management
+2
7 Quellen
CVE-2026-72329 | Linux Kernel up to 7.1.4/7.2-rc2 liquidio liquidio_vf.c pcie_flr null pointer dereference
6 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2026-72395 | Linux Kernel up to 7.2-rc1 Hwmon Pmbus regulator_handle_critical event state issue VVulDB Updatesvor 3 Std.CVE-2026-72380 | Linux Kernel up to 7.1.4/7.2-rc1 xen/pvcalls class.c pvcalls_front_event_handler req_id out-of-bounds write VVulDB Updatesvor 3 Std.CVE-2026-72338 | Linux Kernel up to 7.2-rc2 act_pedit net/sched/act_pedit.c tcf_pedit_offload_act_setup tcfp_nkeys toctou VVulDB Updatesvor 3 Std.CVE-2026-72254 | Linux Kernel up to 7.2-rc1 netfilter nft_fib_validate null pointer dereference LLinux, GNU/Linux, free soft…vor 6 Std.The Linux 7.4 Merge Window Is Easily The Largest In Kernel History IIT Security Newsvor 5 Std.Critical Linux Kernel Vulnerability Could Allow Hackers to Gain Remote Root Access
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4278594/malware-trojaner-viren/midnight-blizzard-linked-malware-server-still-delivering-payloads-8-weeks-after-disclosure/