Tag: snakedisk

1 Attack Reports | 0 Vulnerabilities

Attack reports

Updated Toneshell backdoor and novel SnakeDisk USB worm dropped

In mid-2025, China-aligned threat actor Hive0154 deployed new malware variants, including an updated Toneshell backdoor and a novel USB worm called SnakeDisk. Toneshell9 evades detection and supports C2 communication through local proxies. SnakeDisk only executes on devices in Thailand, propagating…
backdoor
espionage
china
toneshell
pubload
thailand
yokai
2025-09-11
usb worm
snakedisk
Published: September 11, 2025
Downloadable IOCs: 7
Click here to see more Attack Reports