Tag: oyster

2 Attack Reports | 0 Vulnerabilities

Attack reports

Threat Actors Leverage SEO Poisoning and Malicious Ads to Distribute Backdoored Microsoft Teams Installers

A new campaign is distributing the Oyster (Broomstick) backdoor through trojanized Microsoft Teams installers. Threat actors are using SEO poisoning and malvertising to trick users into downloading fake installers from spoofed websites. The malicious installers deploy a persistent backdoor that ena…

dll sideloading

microsoft teams

c2 communication

oyster backdoor

trojanized installer

Published: October 2, 2025

Downloadable IOCs: 15

Like PuTTY in Admin's Hands

The LevelBlue Managed Detection and Response team handled incidents related to a malvertising campaign distributing trojanized versions of the PuTTY terminal emulator. The malicious software, masquerading as legitimate PuTTY, was downloaded by privileged users and exhibited behaviors such as Kerber…

Published: August 27, 2025

Downloadable IOCs: 0

Click here to see more Attack Reports