Tag: phantomremote

1 Attack Reports | 0 Vulnerabilities

Attack reports

Rainbow Hyena strikes again: new backdoor and shift in tactics

A new phishing campaign targeting healthcare and IT organizations in Russia has been attributed to the Rainbow Hyena cluster. The attackers used compromised email addresses to distribute malicious attachments, including polyglot files and LNK files mimicking legitimate documents. A new custom-built…
backdoor
phishing
lnk files
2025-07-15
phantomremote
rainbow hyena
Published: July 15, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports