organization · 7 records
Hunt.io
3BB Attacker Used MeshCentral Backdoor for Root Access
An attacker compromised 3BB's network, using MeshCentral as a backdoor to target subscriber credentials and internal systems.
JADEPUFFER group targets AI infrastructure using new ENCFORGE ransomware strain
A threat actor known as JADEPUFFER deployed a new Go-based ransomware strain called ENCFORGE targeting AI model files and infrastructure after exploiting a remote code execution vulnerability in Langflow.
Russian hackers exploit Zimbra vulnerability to steal email data
A Russian state-supported espionage group exploited a zero-day vulnerability in Zimbra's webmail client to steal email data and authentication codes from Western government and commercial organizations between July 2025 and early 2026.
ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body
A Chinese-speaking threat actor exploited a critical ownCloud vulnerability to steal files from a Philippine nuclear research organization.
Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
A Chinese-speaking threat actor is installing malicious Apache modules on Brazilian government servers to redirect traffic to gambling and betting websites.
Hacker uses unattended Hermes AI agent at Thai Ministry of Finance
A hacker used an unattended Hermes AI agent to conduct post-exploitation activities at Thailand's Ministry of Finance, detecting logs on a web server that revealed internal network scans and default configuration exploits.
Flying Eagle Android malware source code spreads through telegram channels
Source code for the Flying Eagle Android remote access trojan framework is circulating through criminal Telegram channels, with researchers tracing infrastructure to 170 servers and linking it to a fake public security application in China.