Hackers Exploiting Triofox Flaw to Install Remote Access Tools via Antivirus Feature

Back Thehackernews

Hackers Exploiting Triofox Flaw to Install Remote Access Tools via Antivirus Feature

Thehackernews •[email protected] (The Hacker News) • November 10, 2025

Share: View original

Your patch pipeline shouldn't be a gamble — build the guardrails that keep speed from becoming risk.

Learn how to protect cloud workloads, control access, and meet compliance requirements — without slowing innovation.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Exploitation of Triofox CVE-2025-12480 Vulnerability by Hackers Hackers are exploiting a critical unauthenticated access vulnerability (CVE-2025-12480) in Gladinet's Triofox file-sharing platform. This flaw allows attackers to bypass authentication and gain administrative access, enabling the deployment of remote access tools and malicious payloads. The threat cluster responsible for the attacks is tracked as UNC6485, with exploitation activities identified since August 2025. 3 sources 40

Extracted Entities

Attack Types (1)

Vulnerabilities (1)