An espionage campaign targeting government organizations across the Commonwealth of Independent States (CIS), with additional interest in water, environmental, and energy sectors. The investigation found four infection chains active from June 2025 through 2026. The attackers used macro-enabled Word documents, PS2EXE-built executables, malicious... Weiterlesen: UAT-6275 Hackers Use WinRAR Exploit and GitHub PowerShell to Target C…
Intelligence View
⚡ tsecurity.de Intelligence
UAT-6275 Hackers Use WinRAR Exploit and GitHub PowerShell to Target CIS Governments
An espionage campaign targeting government organizations across the Commonwealth of Independent States (CIS), with additional interest in water, environmental,…
Hacking & Pentesting GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit TA0002 · T1059 Gov & Defense
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1059TA0002 · Execution
Command and Scripting Interpreter
Mitigation: M1038 Execution Prevention & Script Block Logging
Quelle: Kontext-Klassifikation des Artikeltextes
Execution
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
15 sources
CVE-2026-6930 | IBM Concert up to 3.0.0 inadequate encryption (EUVD-2026-104488)
14 more sources
VVulDB Updates1 hour agoCVE-2026-15661 | IBM Concert up to 3.0.0 (EUVD-2026-104487) VVulDB Updates1 hour agoCVE-2026-111061 | Eugeny russh up to 0.64.0 SSH Agent allocation of resources (EUVD-2026-104457) VVulDB Updates1 hour agoCVE-2026-111750 | aio-libs aiohttp up to 3.14.3 Pure Python Parser input validation (EUVD-2026-104486) VVulDB Updates1 hour agoCVE-2026-111749 | aio-libs aiohttp up to 3.14.3 information disclosure (EUVD-2026-104485) VVulDB Updates1 hour agoCVE-2026-12727 | IBM MQ Operator/MQ Advanced container images off-by-one (EUVD-2026-104463) VVulDB Updates3 hours agoCVE-2026-111058 | mljar Mercury up to 3.2.5 WebSocket Wrapper /api/kernels improper authorization (EUVD-2026-104420)
+8
10 sources
Apple Announces October 28 'Pro and Tell' Event
9 more sources
Aappgefahren.de1 hour agoApple lädt am 28. Oktober zum Mac- und iPad-Event MMacDailyNews2 hours agoApple teases ‘Pro and Tell’ event for October 28th as touchscreen MacBook Pro anticipation builds WWinFuture News2 hours agoSchlag auf Schlag: Nächstes Apple-Event "Pro and Tell" noch im Oktober CComputerBase2 hours ago„Pro and tell“: Apple setzt MacBook-Pro-Event für 28. Oktober an CCult of Mac2 hours agoApple makes ‘Pro and Tell’ event official for October 28 LLatest from TechRadar3 hours agoApple promises to ‘Pro and Tell’ on October 28, and a touchscreen MacBook Pro could finally arrive
+3
9 sources
CVE-2026-83596 | Red Hat Enterprise Linux 6/7/8/9 memory corruption (Nessus ID 367253)
8 more sources
VVulDB Updates2 hours agoCVE-2026-60589 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition Security information disclosure (Nessus ID 338214 / WID-SEC-2026-2897) VVulDB Updates2 hours agoCVE-2026-61308 | Oracle GraalVM Enterprise Edition/GraalVM for JDK/Java SE Networking improper authorization (Nessus ID 338214 / WID-SEC-2026-2897) VVulDB Updates2 hours agoCVE-2026-70907 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition JSSE denial of service (Nessus ID 338214 / WID-SEC-2026-2897) VVulDB Updates2 hours agoCVE-2024-26708 | Linux Kernel up to 6.6.17/6.7.5 mptcp subflow_state_change race condition (4bfe217e075d/e158fb9679d1/337cebbd850f / Nessus ID 210815) VVulDB Updates2 hours agoCVE-2024-26709 | Linux Kernel up to 6.7.5 powerpc iommu_group_put memory leak (c90fdea9cac9/0846dd77c834 / WID-SEC-2024-0773) VVulDB Updates2 hours agoCVE-2024-26717 | Linux Kernel up to 5.15.148/6.1.78/6.6.17/6.7.5 i2c-hid-of null pointer dereference (Nessus ID 207773 / WID-SEC-2024-0773)
+2
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4270422/ethical-hacking/uat-6275-hackers-use-winrar-exploit-and-github-powershell-to-target-cis-governments/