Storm-3358 uses ARTEX against financial sector
Cambodia-based Storm-3358 cluster deploys agentic AI framework ARTEX to scan exploit and install RATs in financial organizations across Southeast Asia.
75
Malware
VShell
- Mentions · 7d1
- Mentions · 30d1
- All mentions3
- First seenSep 25, 2026
- Last mentioned4d ago
Timeline
3 articles · newest firstRoundcube SQL injection CVE-2026-48842 is now being exploited in the wild
Pre-authentication Roundcube SQL injection CVE-2026-48842 is now exploited against unpatched webmail servers.
76
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild
Roundcube pre-auth SQL injection CVE-2026-48842 is being exploited, Canadian cyber authorities warned.
75
Related CVEs
by mentions- CVE-2025-49113100%8.8Authenticated PHP Object Deserialization RCE in Roundcube Webmail
- CVE-2025-6846127%6.1Cross-Site Scripting via SVG animate Tag in Roundcube Webmail
- CVE-2026-488422%8.1Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash…
Appears with
- SentinelOneorganization · 2
- UNK_MassTractionthreat actor · 2
- Canadian Centre for Cyber Securityorganization · 2
- Roundcubevendor · 2
- Roundcube Webmailproduct · 2
- CISAorganization · 2
- Shadowserver Foundationorganization · 1
- WISPmalware · 1
- financial organizations in Southeast Asiavictim · 1
- Proofpointorganization · 1
- AdaptixC2malware · 1
- ARTEXai model · 1
- Storm-3358threat actor · 1
- Microsoftvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.