Tag: phantomheart

1 Attack Reports | 0 Vulnerabilities

Attack reports

Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload

Cloud Atlas APT group targeted government organizations and commercial companies in Russia and Belarus during late 2025 and early 2026, employing phishing campaigns with malicious ZIP archives containing LNK shortcuts. The attackers deployed multiple backdoors including VBCloud for file theft and P…
valleyrat
netsupport rat
vbcloud
powershower
2026-05-22
cloud atlas
phantomheart
powercloud
reversesocks
Published: May 22, 2026
Linked vulnerabilities : CVE-2018-0802, CVE-2025-55182 (CVSS 10.0), CVE-2025-68670 (CVSS 9.1)
Downloadable IOCs: 17
Click here to see more Attack Reports