Tag: tetraloader

1 Attack Reports | 0 Vulnerabilities

Attack reports

Exploits Cityworks zero-day vulnerability to deliver malware

Chinese-speaking threat actors, dubbed UAT-6382, have been exploiting a remote-code-execution vulnerability (CVE-2025-0994) in Cityworks, a popular asset management system. The attacks, which began in January 2025, target local governing bodies in the United States, focusing on utilities management…
cobalt strike
exploitation
china chopper
chinese threat actors
CVE-2025-0994
vshell
web shells
2025-05-22
antsword
tetraloader
cityworks
Published: May 22, 2025
Linked vulnerabilities : CVE-2025-0944 (CVSS 6.3)
Downloadable IOCs: 18
Click here to see more Attack Reports