Woodgnat

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 3, 2026
Last mentionedSep 3, 2026

Timeline

1 articles · newest first

Attackers Turn Trusted Node.js Runtime Into Malware Delivery Tool in Targeted Attacks

Symantec reports multiple threat actors, including KongTuke, abusing the trusted signed Node.js runtime and blockchain C2 (EtherHiding) to deliver backdoors in targeted attacks.

The Hacker NewsSep 3, 10:43 UTC · Sep 3, 2026Threat actorExploited2 · 1 read

Appears with

AdaptixC2product · 1
Misticmalware · 1
Cobalt Strikeproduct · 1
Broadcomorganization · 1
Zscalervendor · 1
Zscalerorganization · 1
C2Loopermalware · 1
AsukaStealermalware · 1
ModeloRATmalware · 1
GuidePoint Securityvendor · 1
GateKeeperproduct · 1
KongTukethreat actor · 1
AsukaStealerproduct · 1
EtherRATmalware · 1
Broadcomvendor · 1
Misticproduct · 1

Entities are extracted by the model from each article. First seen Sep 3, 2026, last mentioned Sep 3, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.