SpectreMalware
ransomwareFrom MISP Galaxy
Last reported 19 days ago, by The Hacker News5 reports
ATT&CK techniques
6 techniques · each with the sentence it comes from- T1505.003Web Shell
“…026-82078 and CVE-2026-81578, two PaperCut MF vulnerabilities, as zero-days to load an in-memory Java loader, which in turn deployed a web shell.”
- T1036Masquerading
“The end goal is to deploy a custom backdoor called CosmicPulse by setting up scheduled tasks using RedFlick through phishing emails masquerading as invitations.”
- T1053.005Scheduled Task
“The end goal is to deploy a custom backdoor called CosmicPulse by setting up scheduled tasks using RedFlick through phishing emails masquerading as invitations.”
- T1056.001Keylogging
“"The latest Python NodeStealer variant incorporates new spyware features, including keylogging, clipboard monitoring, and screenshot capture," Netskope said.”
- T1213.003Code Repositories
“The leak included databases for Geedge's Jira and Confluence portals, but also all its Git source code repositories, containing commit history going back to November 2024.”
- T1213.005Messaging Applications
“Named Manic, the trojan can target Ukrainian banks, government agencies, identity services, and local messaging applications.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
5 reports, newest first · the exact sentence from each-
⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests“⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests”
-
Spectre bug is back, this time to haunt JIT engines“Spectre bug is back, this time to haunt JIT engines”
-
New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses“A group of academics from VUSec and Scuola Superiore Sant'Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT) engines present in web browsers, language runtimes, and the operating system kernel, across multiple CPU vendors.”
-
New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks“New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks”
-
Risky Bulletin: Academics find source code overlaps between Geedge and China's Great Firewall“Cloudflare saw no Spectre attacks: Internet infrastructure company Cloudflare has not seen any evidence of active exploitation of the Spectre CPU vulnerabilities over the last three years.”
Indicators in its reports
named in the reports above- apply.fbijobs[.]govin 1 report
Copy this indicator · defanged
Thanks — we review every report.