Exploitation of Triofox CVE-2025-12480 Vulnerability by Hackers

Hackers are exploiting a critical unauthenticated access vulnerability (CVE-2025-12480) in Gladinet's Triofox file-sharing platform. This flaw allows attackers to bypass authentication and gain administrative access, enabling the deployment of remote access tools and malicious payloads. The threat cluster responsible for the attacks is tracked as UNC6485, with exploitation activities identified since August 2025.