Tag: tuktuk

1 Attack Reports | 0 Vulnerabilities

Attack reports

Flash Alert: EtherRat and TukTuk C2 End in The Gentleman Ransomware

An intrusion was observed in April 2026 where threat actors deployed EtherRAT malware through a malicious MSI installer disguised as a Sysinternals tool. The malware utilized Ethereum blockchain via EtherHiding for dynamic C2 configuration updates. Following reconnaissance activities, actors deploy…
rclone
dll sideloading
mimikatz
ethereum
kerberoasting
the gentlemen ransomware
the gentlemen
CVE-2025-55182
etherrat
saas abuse
netexec
blockchain c2
2026-05-11
tuktuk
Published: May 11, 2026
Linked vulnerabilities : CVE-2025-55182 (CVSS 10.0)
Downloadable IOCs: 17
Click here to see more Attack Reports