Tag: installer tampering

2 Attack Reports | 0 Vulnerabilities

Attack reports

Website installer incident (May 2026)

In early May 2026, attackers compromised the official JDownloader website by manipulating specific installer download links through the content management system. Between May 6-7, 2026 (UTC), users who downloaded Windows installers via "Download Alternative Installer" links or the Linux shell insta…
website defacement
supply chain compromise
installer tampering
2026-05-11
cms exploitation
download link manipulation
jdownloader incident
windows linux targeting
Published: May 11, 2026
Downloadable IOCs: 8

Pretexting-Based Targeted Intrusion: Analysis of Facebook Reconnaissance and Software Tampering Attacks

APT37 conducted a sophisticated social engineering campaign utilizing Facebook accounts claiming locations in Pyongyang and Pyongsong, North Korea, to conduct reconnaissance and build trust with targets. After establishing relationships through Facebook Messenger, the threat actor migrated conversa…
social engineering
north korea
rokrat
process hollowing
shellcode injection
apt37
2026-04-14
facebook reconnaissance
installer tampering
pretexting
zoho workdrive c2
Published: April 14, 2026
Downloadable IOCs: 10
Click here to see more Attack Reports