Tag: mythic agent

2 Attack Reports | 0 Vulnerabilities

Attack reports

ShadowRelay: New Modular Backdoor in the Public Sector

A new modular backdoor called ShadowRelay was discovered on a compromised Exchange server in a government organization. The backdoor allows loading different plugins and demonstrates sophisticated design indicative of well-prepared attackers. It uses packet injection to hide network activity and ca…
backdoor
apt
espionage
modular
government
CVE-2021-34473
shadowpad
CVE-2021-31207
CVE-2021-34523
shadowpad light
exchange
mythic agent
2026-01-23
donnect
packet injection
shadowrelay
Published: January 23, 2026
Linked vulnerabilities : CVE-2021-34473, CVE-2021-31207, CVE-2021-34523
Downloadable IOCs: 5

Russian RomCom Utilizing SocGholish to Deliver Mythic Agent to U.S. Companies Supporting Ukraine

Arctic Wolf Labs identified a U.S.-based company targeted by the Russian-aligned threat group RomCom via SocGholish, operated by TA569. This marks the first observed instance of a RomCom payload being distributed through SocGholish. The attack chain involved compromising legitimate websites, using …
malvertising
ukraine
socgholish
fakeupdate
gru
2025-11-25
ta569
mythic agent
vipertunnel
Published: November 25, 2025
Linked vulnerabilities : CVE-2025-64446 (CVSS 9.8)
Downloadable IOCs: 8
Click here to see more Attack Reports