TASK#STOMP (Malware): news timeline & CVEs

Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents

Weekly roundup leads with a Gyazo breach of 23.6 million users and the TASK#STOMP document-stealing backdoor.

Helpfeel confirmed that hackers exploited a Gyazo server flaw and stole 23.6 million user records. The same weekly digest details TASK#STOMP, a Windows backdoor that uploads business documents and also takes Wi-Fi passwords, clipboard text, and screenshots. A Chinese-speaking actor exploited CVE-2026-7273 on 996 unpatched Zyxel GS1900 switches in 48 countries, and Check Point said CVE-2026-93616 has been exploited since July 23, 2026. Elsevier domains were briefly redirected to a LAPSUS$ page, while DarkMe is now spread by ordinary phishing email.

Help Net Security08:00 UTC · 1h agoData breach in the wildCVE-2026-7273 CVE-2026-85102 CVE-2026-93616

TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data

Securonix details TASK#STOMP, a PowerShell backdoor stealing documents, Wi-Fi passwords, and clipboard data.

Securonix researchers disclosed TASK#STOMP, a campaign that uses wscript.exe to run an encoded VBScript and install a PowerShell backdoor. The malware harvests business documents, Wi-Fi passwords, clipboard contents, and screenshots, watches for new files, and accepts remote commands. Persistence uses disguised scheduled tasks plus a Startup-folder script, with redundant command-and-control at corecloudfileshare.xyz and attachmentsharingdrive.xyz. Initial access is unclear, though phishing is possible, and the chain later opens an Iranian government tenders site in Chrome.

The Hacker Newsupdated Sep 22, 13:45 UTC · 4d agofirst Sep 21, 14:15 UTC · 5d agoMalware in the wild 4 sources

FBI's CJIS v6.1: What Security Teams Need to Know.

FBI’s CJIS v6.1 policy updates encryption and vulnerability management requirements with no direct impact on exploits.

FBI’s CJIS v6.1 policy updates encryption and vulnerability management requirements, with no direct impact on exploits or security incidents.

BleepingComputerSep 21, 14:02 UTC · 5d agoOther

TASK#STOMP

Timeline3 articles

Related CVEsby mentions

Appears with

Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents

TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data

FBI's CJIS v6.1: What Security Teams Need to Know.