Tag: mcrat

2 Attack Reports | 0 Vulnerabilities

Attack reports

New burrowing techniques

Webworm is a China-aligned APT group that has evolved its tactics since first being discovered in 2022, shifting focus from Asian targets to European governmental organizations. In 2025, the group deployed two new backdoors: EchoCreep, which uses Discord for command and control, and GraphWorm, whic…
apt
trochilus
mcrat
vulnerability scanning
cloud infrastructure
china-aligned
proxy tools
microsoft graph api
2026-05-20
chainworm
CVE-2017-7692
discord c&c
echocreep
github staging
graphworm
smuxproxy
wormfrp
wormsocket
Published: May 20, 2026
Linked vulnerabilities : CVE-2017-7692
Downloadable IOCs: 0

Attempted cyberattacks on military systems using mobile malware

The report details attempts by threat actors to compromise smartphones and tablets belonging to military personnel by distributing malicious APK files disguised as legitimate software for military systems like GRISELDA and "Eyes". The malware, named HYDRA and a modified version of "Eyes", was desig…
apt
2024-09-10
aurora
fakeapps
militarytargeting
datatheft
mdmbot
mcrat
hydraq
roarur
homeunix
hidraq
mobileattacks
9002 rat
homux
Published: September 10, 2024
Downloadable IOCs: 15
Click here to see more Attack Reports