Tag: tightvnc

3 Attack Reports | 0 Vulnerabilities

Attack reports

Web Shells, Tunnels, and Ransomware: Dissecting a Warlock Attack

The Warlock ransomware group has enhanced its attack chain with improved methods for persistence, lateral movement, and evasion. Their updated toolset includes TightVNC, Yuze, and a persistent BYOVD technique exploiting the NSec driver. The group's primary targets were technology, manufacturing, an…

lateral movement

Published: March 16, 2026

Downloadable IOCs: 10

From Dream Job to Malware: DreamLoaders in Recent Campaign

An analysis of Lazarus group's DreamJobs campaign reveals sophisticated malware deployment strategies. The group uses various loaders, dubbed 'DreamLoaders', to deploy different payloads. Key components include a trojanized TightVNC client, DLL loaders executed through sideloading, and TSVIPSrv.dll…

Published: October 27, 2025

Downloadable IOCs: 0

MostereRAT Deployed AnyDesk/TightVNC for Covert Full Access

A sophisticated phishing campaign targeting Japanese users employs MostereRAT, a Remote Access Trojan that utilizes advanced evasion techniques. The attack chain involves multiple stages, including an Easy Programming Language (EPL) payload, security tool disabling, and mTLS-secured C2 communicatio…

evasion techniques

Published: September 9, 2025

Downloadable IOCs: 12

Click here to see more Attack Reports