update.exe

• CloudZ RAT potentially steals OTP messages using Pheno plugin

  CloudZ RAT potentially steals OTP messages using Pheno plugin Cisco Talos discovered an intrusion, active since at least January 2026, where an unknown attacker implanted a CloudZ remote access tool (RAT) and a previously undocumented plugin called “Pheno.” Cisco Talos dis

• Operation TrueChaos: 0-Day Exploitation Against Southeast Asian Government Targets

  Operation TrueChaos: 0-Day Exploitation Against Southeast Asian Government Targets Key Points Introduction At the beginning of 2026, Check Point Research observed a series of targeted attacks against government entities in Southeast Asia carried out via a legitimate TrueConf sof

• Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns

  Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns Unit 42 details Screening Serpens' use of AppDomainManager hijacking and new RAT variants to target tech and defense sectors in recent campaigns. The post Tracking Iranian APT Screening Serpens’ 2026 Espionage Camp

• Fast and Furious – Nimbus Manticore Operations During the Iranian Conflict

  Fast and Furious – Nimbus Manticore Operations During the Iranian Conflict Key Findings Introduction During the recent geopolitical tensions in the Middle East, we reported on multiple Iran-nexus threat actors advancing Iran’s strategic objectives through cyber operati

• Killing me gently: Inside Gentlemen’s EDR killer framework

  Killing me gently: Inside Gentlemen’s EDR killer framework ESET Research shares the results of a months-long investigation into the suite of EDR killers maintained by the RaaS gang Gentlemen Killing me gently: Inside Gentlemen’s EDR killer framework Award-winning news, views, a

• OceanLotus: From external espionage to domestic targeting

  OceanLotus: From external espionage to domestic targeting A shift in operational pattern of the infamous Vietnam-aligned APT group OceanLotus: From external espionage to domestic targeting Award-winning news, views, and insight from the ESET security community English Español D

All reports →

• Connector · intel_report_ingest3