Tag: dwagent

3 Attack Reports | 0 Vulnerabilities

Attack reports

Disclosing new PebbleDash-based tools

Kaspersky researchers conducted an in-depth analysis of Kimsuky APT activity, revealing tactical shifts and new malware variants based on the PebbleDash platform. The group introduced HelloDoor, a Rust-based backdoor, httpMalice leveraging HTTP and Dropbox communications, and updated MemLoad and ht…

vscode tunneling

Published: May 14, 2026

Downloadable IOCs: 9

Targets critical infrastructure sectors in North America

UAT-8837, assessed as a China-nexus advanced persistent threat actor, has been targeting critical infrastructure sectors in North America since 2025. The group exploits vulnerabilities, including zero-days, to gain initial access and deploys open-source tools for reconnaissance, credential harvesti…

credential harvesting

lateral movement

critical infrastructure

active directory

Published: January 16, 2026

Linked vulnerabilities : CVE-2025-53690

Downloadable IOCs: 29

ViewState Deserialization Zero-Day Vulnerability in Sitecore Products (CVE-2025-53690)

A critical ViewState deserialization vulnerability (CVE-2025-53690) was discovered in Sitecore products, affecting deployments using an exposed sample machine key. The attacker exploited this to achieve remote code execution, progressing from initial compromise to privilege escalation. Key events i…

lateral movement

privilege escalation

remote code execution

deserialization

Published: September 4, 2025

Downloadable IOCs: 0

Click here to see more Attack Reports