ThreatCluster

Pro-Russian Cyber Attacks Utilizing Malware Tools and Ransomware

First seen 21 Dec 2025, 15:00 UTC •Securityaffairs.Co •98% similarity •29

Article Content

Browse articles
ThreatCluster

A series of pro-Russian cyber attacks have been executed using various malware tools, including ransomware. Notably, the operation named MoneyMount-ISO has been identified as deploying Phantom Stealer through ISO-mounted executables, affecting numerous users. Additionally, a PNG icon exploit has led to the infection of 50,000 Firefox users.

ThreatCluster AI How this analysis works

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

GhostPoster Phantom Stealer Operation MoneyMount-ISO