A server linked to a malware campaign attributed to a Midnight Blizzard-associated cluster was still delivering malicious files on October 5, 2026. The server returned HTTP 200 responses for multiple payload paths, including one used by simple Windows Internet Shortcut files to launch a PowerShell stager. The finding shows that public disclosure... Weiterlesen: Midnight Blizzard-Linked Malware Server Still Delivering Payloads 8 W…
Intelligence View
⚡ tsecurity.de Intelligence
Midnight Blizzard-Linked Malware Server Still Delivering Payloads 8 Weeks After Disclosure
A server linked to a malware campaign attributed to a Midnight Blizzard-associated cluster was still delivering malicious files on October 5, 2026. The server…
Malware & Threat Intel GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit TA0002 · T1059
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1059TA0002 · Execution
Command and Scripting Interpreter
Mitigation: M1038 Execution Prevention & Script Block Logging
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 82%
Enforce process and script logging (Sysmon/auditd), block execution of untrusted scripts.
Execution
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
18 sources
CVE-2026-99264 | Linux Kernel up to 6.12.114/6.18.59/7.2.13 io_uring/net buffer overflow (Nessus ID 375590)
17 more sources
VVulDB Updates2 hours agoCVE-2026-99262 | Linux Kernel up to 7.2.13 io_uring io_wq_submit_work race condition (Nessus ID 375588) VVulDB Updates2 hours agoCVE-2026-99263 | Linux Kernel up to 7.3.0 io_uring io_poll_check_events toctou (Nessus ID 375586) VVulDB Updates2 hours agoCVE-2026-99261 | Linux Kernel up to 7.2.12 drm-amdgpu buffer overflow (Nessus ID 375587) VVulDB Updates2 hours agoCVE-2026-99254 | Linux Kernel up to 7.2.13 io_uring io_ring_exit_work resource consumption (Nessus ID 375585) VVulDB Updates2 hours agoCVE-2026-99253 | Linux Kernel up to 7.2.13 io_uring io_uring_try_cancel_requests cq_wait_nr race condition (Nessus ID 375582) VVulDB Updates1 hour agoCVE-2026-99259 | Linux Kernel up to 7.2.12 PMC driver tegra_pmc_enter_suspend_mode rate uninitialized variable (Nessus ID 375581)
+11
6 sources
Open Source Friday: pgmq
5 more sources
HHelp Net Security1 hour agoOpen-source file sync tool rsync 3.5.2 fixes a CPU exhaustion flaw TTecmint: Linux Howtos, Tuto…4 hours agoPikaPods: Host Any Open-Source Apps Without a VPS Server ZZDNET5 hours agoFiling bugs for open-source apps is a huge help for developers – and easier than you think HHelp Net Security3 hours agoGhostunnel: Open-source TLS proxy with mutual authentication ZZDNET5 hours agoFiling bugs for open-source apps is a huge help for developers – and easier than you think
5 sources
CVE-2022-48571 | memcached 1.6.7 UDP Packet denial of service (EUVD-2022-51267)
4 more sources
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4278594/malware-threat-intel/midnight-blizzard-linked-malware-server-still-delivering-payloads-8-weeks-after-disclosure/