Tag: 2025-09-11

2 Attack Reports | 5 Vulnerabilities

Attack reports

Updated Toneshell backdoor and novel SnakeDisk USB worm dropped

In mid-2025, China-aligned threat actor Hive0154 deployed new malware variants, including an updated Toneshell backdoor and a novel USB worm called SnakeDisk. Toneshell9 evades detection and supports C2 communication through local proxies. SnakeDisk only executes on devices in Thailand, propagating…
backdoor
espionage
china
toneshell
pubload
thailand
yokai
2025-09-11
usb worm
snakedisk
Published: September 11, 2025
Downloadable IOCs: 7

Malware Campaign Leverages SVGs, Email Attachments, and CDNs to Drop XWorm and Remcos via BAT Scripts

A sophisticated malware campaign has been uncovered that utilizes various techniques to deliver Remote Access Trojans (RATs) such as XWorm and Remcos. The attack chain begins with a ZIP archive, often hosted on trusted platforms like ImgKit, containing obfuscated BAT scripts. These scripts execute …
obfuscation
xworm
rat
phishing
powershell
remcos
evasion techniques
bat scripts
svg
fileless execution
2025-09-11
Published: September 11, 2025
Downloadable IOCs: 2
Click here to see more Attack Reports

Vulnerabilities

CVE-2025-10236

5.3
    Binary-Husky
  • Gpt Academic
Published: September 11, 2025

CVE-2025-10234

4.8
    Scada-Lts
  • Scada-Lts
Published: September 11, 2025

CVE-2025-10235

4.8
    Scada-Lts
  • Scada-Lts
Published: September 11, 2025

CVE-2025-10245

4.8
    *
  • Display Paineis Tga
Published: September 11, 2025

CVE-2025-6088

4.2
    Danny-Avila
  • Librechat
Published: September 11, 2025
Click here to see more Vulnerabilities