TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore
Head Mare exploits TrueConf server flaws to install web shells and deliver PhantomCore and PhantomGraph backdoors at Russian organizations.
74
Country
Southeast Asia
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 17, 2026
- Last mentionedAug 21, 2026
Timeline
3 articles · newest firstUnit 42 Researchers Discover Multiple Espionage Operations Targeting Southeast Asian Government
Unit 42 attributes three espionage clusters targeting a Southeast Asian government to Stately Taurus, Alloy Taurus, and Gelsemium APTs.
70
Persistent Attempts at Cyberespionage Against Southeast Asian Government Target Have Links to Alloy Taurus
Alloy Taurus (GALLIUM) compromised Southeast Asian government networks from 2022 to 2023 using Exchange web shells and undocumented .NET backdoors Reshell and Zapoa.
70
Appears with
- GALLIUMthreat actor · 2
- Unit 42organization · 2
- China Chopperproduct · 2
- Palo Alto Networksorganization · 2
- Alloy Taurusthreat actor · 2
- HelloNetthreat actor · 1
- HelloCleanermalware · 1
- ToneShellmalware · 1
- TrueConf Serverproduct · 1
- HelloProxymalware · 1
- PhantomCoremalware · 1
- Mustang Pandathreat actor · 1
- Gelsemiumthreat actor · 1
- WebScanproduct · 1
- Havocmalware · 1
- TrueConfvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.