Tag: sandbox escape

4 Attack Reports | 0 Vulnerabilities

Attack reports

How ForumTroll APT was linked to Dante spyware

Kaspersky researchers uncovered a sophisticated attack campaign dubbed Operation ForumTroll, targeting organizations in Russia and Belarus. The campaign utilized a zero-day exploit (CVE-2025-2783) in Google Chrome to deliver spyware. Further investigation revealed connections to previously unknown …

Published: October 27, 2025

Linked vulnerabilities : CVE-2025-2783 (CVSS 8.3), CVE-2025-2857 (CVSS 10.0)

Downloadable IOCs: 3

Mem3nt0 mori – The Hacking Team is back!

Kaspersky researchers uncovered a sophisticated attack campaign dubbed Operation ForumTroll, targeting organizations in Russia and Belarus. The campaign utilized a zero-day exploit (CVE-2025-2783) in Google Chrome to deliver spyware. Further investigation revealed connections to previously unknown …

Published: October 27, 2025

Downloadable IOCs: 0

From Compromised Keys to Phishing Campaigns: Inside a Cloud Email Service Takeover

An AWS access key compromise led to a sophisticated SES abuse campaign in May 2025. The attacker exploited the stolen key to bypass SES restrictions, verify new sender identities, and conduct a large-scale phishing operation. They used multi-regional PutAccountDetails requests to escape the SES san…

Published: September 4, 2025

Downloadable IOCs: 4

Operation ForumTroll exploits zero-days in Google Chrome

In March 2025, a sophisticated malware campaign exploited a zero-day vulnerability in Google Chrome to infect targets. The attack, dubbed Operation ForumTroll, used personalized phishing emails with short-lived links to deliver malware. Kaspersky detected the exploit, reported it to Google, and an …

trojan.win64.convagent.gen

trojan.win64.agent

Published: March 25, 2025

Downloadable IOCs: 0

Click here to see more Attack Reports