Tag: file-sharing

2 Attack Reports | 0 Vulnerabilities

Attack reports

Unauthenticated Remote Access via Triofox Vulnerability CVE-2025-12480

A critical vulnerability in Gladinet's Triofox file-sharing platform, CVE-2025-12480, allowed unauthenticated access to configuration pages, enabling arbitrary payload execution. Threat actor UNC6485 exploited this flaw as early as August 24, 2025, bypassing authentication and chaining it with anti…
remote access
privilege escalation
file-sharing
triofox
unauthenticated access
2025-11-10
CVE-2025-12480
anti-virus abuse
host header attack
Published: November 10, 2025
Linked vulnerabilities : CVE-2025-12480 (CVSS 9.1)
Downloadable IOCs: 7

Pick your Poison - A Double-Edged Email Attack

A sophisticated cyber-attack campaign has been identified, combining phishing techniques targeting Office365 credentials with malware delivery. The attackers use a file deletion reminder as a pretext, exploiting a legitimate file-sharing service to appear more credible. Upon opening a shared PDF fi…
phishing
social engineering
credential theft
remote access
connectwise rat
2025-04-08
office365
file-sharing
2025-04-28
Published: April 28, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports