Tag: oyster backdoor

2 Attack Reports | 0 Vulnerabilities

Attack reports

Exposing Fox Tempest: A malware-signing service operation

Fox Tempest is a financially motivated threat actor operating a malware-signing-as-a-service (MSaaS) business used by cybercriminals to distribute malicious code, including ransomware. The actor abuses Microsoft Artifact Signing to generate fraudulent code-signing certificates, allowing malware to …

oyster backdoor

vanilla tempest

code-signing certificates

malware-signing-as-a-service

ransomware enabler

Published: May 19, 2026

Downloadable IOCs: 3

Threat Actors Leverage SEO Poisoning and Malicious Ads to Distribute Backdoored Microsoft Teams Installers

A new campaign is distributing the Oyster (Broomstick) backdoor through trojanized Microsoft Teams installers. Threat actors are using SEO poisoning and malvertising to trick users into downloading fake installers from spoofed websites. The malicious installers deploy a persistent backdoor that ena…

dll sideloading

microsoft teams

c2 communication

oyster backdoor

trojanized installer

Published: October 2, 2025

Downloadable IOCs: 15

Click here to see more Attack Reports