Back Gbhackers

VoidLink Framework Introduces On

Gbhackers •Mayura Kathir • February 11, 2026

A newly exposed malware framework, VoidLink, is reshaping how attackers manage implants across modern cloud and enterprise environments. Cisco Talos has now linked this framework to a threat actor tracked as UAT-9921, highlighting how on-demand compilation, modular plugins, and early Windows support point toward the generation of AI-enabled attack platforms. UAT-9921 compromises internet-facing servers, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

VoidLink Framework Emerges as Modular Malware for Linux and Cloud Systems The VoidLink framework has been identified as a new modular malware tool targeting Linux systems and cloud environments. Cisco Talos has linked this framework to the threat actor UAT-9921, which is known for compromising internet-facing servers. Key features of VoidLink include on-demand compilation and modular plugins, indicating a shift towards AI-enabled attack platforms. 4 sources 20

Extracted Entities

VoidLink Framework Introduces On

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)