Tag: 2026-03-01

3 Attack Reports | 20 Vulnerabilities

Attack reports

Fake Zoom meeting 'update' silently installs unauthorized version of monitoring tool abused by cybercriminals to spy on victims

A sophisticated scam campaign is targeting users with a fake Zoom meeting website that automatically downloads and installs an unauthorized version of Teramind, a legitimate workforce monitoring solution. The attackers create a convincing imitation of a Zoom video call, complete with fake participa…
social engineering
valleyrat
fake update
stealth installation
zoom impersonation
2026-03-01
teramind abuse
workforce monitoring
Published: March 1, 2026
Downloadable IOCs: 2

PlugX Meeting Invitation via MSBuild and GDATA

A recent PlugX campaign utilized phishing emails with a 'Meeting Invitation' lure to deploy malware through DLL side-loading. The infection chain begins with a zip file containing a malicious .csproj file and MSBuild executable. The .csproj file downloads three components: a legitimate G DATA Antiv…
rat
phishing
plugx
korplug
dll side-loading
xor encryption
2026-03-01
api hashing
g data antivirus
Published: March 1, 2026
Downloadable IOCs: 8

Abusing Windows File Explorer and WebDAV for Malware Delivery

This analysis details how threat actors are exploiting Windows File Explorer's WebDAV functionality to deliver malware. WebDAV, a legacy protocol, is being used to trick users into downloading malicious files without going through web browsers, potentially bypassing security controls. Campaigns oft…
phishing
dcrat
webdav
lnk file
async rat
remote access trojan
malware delivery
xworm rat
cloudflare tunnel
abuse
2026-03-01
url shortcut
Published: March 1, 2026
Downloadable IOCs: 4
Click here to see more Attack Reports

Vulnerabilities

CVE-2026-3377

7.4
    Tenda
  • F453
Published: March 1, 2026

CVE-2026-3378

7.4
    Tenda
  • F453
Published: March 1, 2026

CVE-2026-3379

7.4
    Tenda
  • F453
Published: March 1, 2026

CVE-2026-3380

7.4
    Tenda
  • F453
Published: March 1, 2026

CVE-2026-3398

7.4
    Tenda
  • F453
Published: March 1, 2026

CVE-2026-3399

7.4
    Tenda
  • F453
Published: March 1, 2026

CVE-2026-3395

6.9
    Maxsite
  • Cms
Published: March 1, 2026

CVE-2026-3382

4.8
    Chaiscript
  • Chaiscript
Published: March 1, 2026

CVE-2026-3383

4.8
    Chaiscript
  • Chaiscript
Published: March 1, 2026

CVE-2026-3384

4.8
    Chaiscript
  • Chaiscript
Published: March 1, 2026

CVE-2026-3385

4.8
    Wren-Lang
  • Wren
Published: March 1, 2026

CVE-2026-3386

4.8
    Wren-Lang
  • Wren
Published: March 1, 2026

CVE-2026-3387

4.8
    Wren-Lang
  • Wren
Published: March 1, 2026

CVE-2026-3388

4.8
    Squirrel
  • Squirrel
Published: March 1, 2026

CVE-2026-3389

4.8
    Squirrel
  • Squirrel
Published: March 1, 2026

CVE-2026-3390

4.8
    Fascinatedbox
  • Lily
Published: March 1, 2026

CVE-2026-3391

4.8
    Fascinatedbox
  • Lily
Published: March 1, 2026

CVE-2026-3392

4.8
    Fascinatedbox
  • Lily
Published: March 1, 2026

CVE-2026-3393

4.8
    Jarikomppa
  • Soloud
Published: March 1, 2026

CVE-2026-3394

4.8
    Jarikomppa
  • Soloud
Published: March 1, 2026
Click here to see more Vulnerabilities