#kaspersky
-
CISA Orders Urgent Patching of TrueConf Server Flaws Being Exploited in Attacks
The U.S. agency CISA has given federal agencies two weeks to remediate two critical vulnerabilities in the TrueConf Server platform. According to Kaspersky Lab, the Head Mare group is using them against Russian companies.
-
Head Mare Breached TrueConf Servers and Swapped Client Installers for Backdoored Ones
The hacktivist group Head Mare is exploiting vulnerabilities in unpatched TrueConf video-communication servers to push users trojanized clients carrying the PhantomCore and PhantomGraph backdoors.
-
OctLurk and SilkLurk: a new espionage campaign against Central Asia
Kaspersky has documented a wave of attacks on government bodies in Central Asia dating back to January 2025. Behind them stands a presumably Chinese-speaking group armed with two previously unknown backdoors.