Tag: phantomcore – Securitricks

216.73.217.22

Tag: phantomcore

Attack reports, vulnerabilities, indicators and intrusion sets linked to phantomcore.

Attack reports (5)

Restless Spirit: New Attacks on Russian Companies

7 MITREs 2 Malwares 7 Observables 1 APT
How NTLM is being abused in 2025 cyberattacks

5 CVEs 11 MITREs 5 Malwares 3 Observables 1 APT
Intensifies Attacks On Russia With PhantomCore

1 CVE 6 MITREs 5 Malwares 31 Observables 1 APT
Threat actors using MacroPack to deploy Brute Ratel, Havoc and PhantomCore payloads

18 MITREs 3 Malwares 16 Observables
Head Mare: adventures of a unicorn in Russia and Belarus

1 CVE 17 MITREs 6 Malwares 52 Observables 1 APT