Belarus-aligned hackers deployed a VBScript wiper against a Ukrainian manufacturing company in late May 2026, marking a significant shift from espionage toward destructive operations. The attacker as FrostyNeighbor, a group also tracked as UNC1151, PUSHCHA, Storm-0257, and TA445. The victim plays an important role in Ukraine’s transportation... Weiterlesen: Belarus-Linked Hackers Deploy Wiper Malware in First Documented Destr…
Intelligence View
⚡ tsecurity.de Intelligence
Belarus-Linked Hackers Deploy Wiper Malware in First Documented Destructive Attack on Ukraine
Belarus-aligned hackers deployed a VBScript wiper against a Ukrainian manufacturing company in late May 2026, marking a significant shift from espionage toward…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1485TA0040 · Impact
Data Destruction
Mitigation: M1053 Data Backup
Quelle: Kontext-Klassifikation des Artikeltextes
Impact
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
30 Quellen
CVE-2024-13362 | Post SMTP Plugin on WordPress Parameter url cross site scripting
29 weitere Quellen
VVulDB Updatesvor 3 Std.CVE-2024-13362 | Lightbox & Modal Popup Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 3 Std.CVE-2024-13362 | XT Floating Cart for WooCommerce Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 3 Std.CVE-2024-13362 | Internal Link Juicer Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 3 Std.CVE-2024-13362 | Knowledge Base Documentation & Wiki Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 3 Std.CVE-2024-13362 | Independent Analytics Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 3 Std.CVE-2024-13362 | Optimized Minify Plugin on WordPress Parameter url cross site scripting
+23
12 Quellen
CVE-2026-53317 | Linux Kernel up to 6.12.90/6.18.32/7.0.9 wifi denial of service
11 weitere Quellen
VVulDB Updatesvor 4 Std.CVE-2026-53258 | Linux Kernel up to 6.18.35/7.0.12 wifi cfg80211_scan int_scan_req memory leak VVulDB Updatesvor 8 Std.CVE-2026-43042 | Linux Kernel up to 6.19.11 mpls platform_label out-of-bounds VVulDB Updatesvor 7 Std.CVE-2026-43185 | Linux Kernel up to 6.18.15/6.19.5 smb_direct_prepare_negotiation buffer overflow VVulDB Updatesvor 7 Std.CVE-2026-43244 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 kcm_write_msgs null pointer dereference VVulDB Updatesvor 7 Std.CVE-2026-43271 | Linux Kernel up to 6.6.127/6.12.74/6.18.15/6.19.5 process_metadata_update null pointer dereference VVulDB Updatesvor 7 Std.CVE-2026-43250 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 ChipIdea UDC Driver _ep_nuke memory corruption
+5
8 Quellen
GitHub - HappyHackingSpace/claude-code-backdoor-check: Read-only scanner for the backdoored Claude Code 2.1.313 extension (Cursor marketplace, Oct 2026): SSH key, persistence, reverse tunnel. macOS + Linux.
7 weitere Quellen
IIT Security Newsvor 3 Std.Hackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor GGBHackers Securityvor 4 Std.Hackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor DDEV Communityvor 4 Std.Claude Code for VS Code 2.1.313 backdoor: how to check your machine and clean up GGoogle Alertvor 4 Std.Claude-Code-Erweiterung im Cursor-Marktplatz mit Malware infiziert | heise online KKitPloitvor 6 Std.claude-code-backdoor-check CCyber Security Newsvor 6 Std.Microsoft Warns of Trojanized Claude Code Extension Planting Persistent SSH Backdoor
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4309004/malware-trojaner-viren/belarus-linked-hackers-deploy-wiper-malware-in-first-documented-destructive-attack-on-ukraine/