Tag: exploit kit
10 articles
P7 DarkSword Exploit Kit Enhances iOS Data Theft Capabilities
Meet P7 DarkSword, a sneaky new iOS exploit kit that's taking data theft to the next level by shrinking its footprint, swiping sensitive info like keychain and crypto-wallet data right from your device. Its clever tactics include extracting data into JSON on your phone and using a two-way communication channel with its command center.
Fortinet Warns of Actively Exploited FortiMail Zero-Day Vulnerability
Fortinet is warning users of a critical vulnerability in its FortiMail product that's already being exploited by hackers, posing an immediate threat to security. This zero-day flaw has been actively targeted by attackers, prompting Fortinet to sound the alarm.
Hackers Exploit Citrix Zero-Day to Deploy Web Shells, Malware
Hackers were quick to pounce on a Citrix zero-day vulnerability, attempting to install a hidden PHP web shell just days before the flaw was publicly disclosed. This early activity sparked a wider campaign, enabling attackers to gain root access, deploy malware, and tunnel into internal networks using the newly disclosed CVE-2026-88771 and CVE-2026-88772 vulnerabilities.
BlueMoon Exploit Kit Targets Windows, Chrome with Zero-Day Flaws
Meet BlueMoon, a sneaky exploit kit that's been wreaking havoc on Windows and Chrome since August 28, using not one, not two, but three zero-day flaws to do its dirty work. This malicious tool, linked to the JungleBamboo threat actor, combines browser vulnerabilities with a Windows kernel exploit to gain ultimate control.
China-linked groups exploit BlueMoon kit to breach US and Southeast Asia targets
China-linked groups are leveraging the BlueMoon exploit kit to launch targeted attacks on organizations in the US and Southeast Asia, with a surprisingly small number of groups behind a large-scale intrusion campaign that quickly evolved from testing to widespread reuse. Fewer than 20 organizations globally were hit, but experts warn the actual number is likely much higher.
Multiple Spy Groups Exploit Chrome, Windows Flaws with BlueMoon Kit
Multiple spy groups are rapidly adopting the BlueMoon exploit kit, leveraging vulnerabilities in Google Chrome and Microsoft Windows to carry out espionage operations, with a suspected China nexus. This kit chains together flaws in Chrome's V8 JavaScript engine and Windows, including several zero-day exploits.
Chinese Threat Actor Exploits Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS Devices
A Chinese threat actor has cleverly exploited a leaked DarkSword kit to deploy GHOSTBLADE on iOS devices, with hosting concentrated in Hong Kong but reaching as far as Japan, the US, and Europe. This surprising attack follows the kit's public leak, which has been rapidly reused to target Apple devices running iOS versions 18.4 through 18.7.
Kaspersky Uncovers Coruna Exploit Kit Linked to Operation Triangulation
Kaspersky's researchers have made a significant discovery: the Coruna exploit kit, now targeting iPhones, uses an updated kernel exploit linked to the notorious Operation Triangulation. This finding highlights the evolving threat landscape, where offensive code is repurposed to target new devices.
Apple Bolsters iOS 18 Defenses Against DarkSword Exploit Kit
Apple is stepping up its game to protect iPhone users with a new security update for iOS 18, shielding against the sneaky DarkSword exploit kit that's been compromising devices. This proactive move is a crucial defense in the ever-evolving world of cybersecurity threats.
DarkSword Threatens iOS with Alarming Russian Cyberattack
A new Russian cyberattack has been detected targeting iOS devices, with a state-sponsored threat group linked to a sophisticated spear-phishing campaign that's got everyone on high alert. Here's what you need to know to protect yourself from this alarming threat.