Related Threat Clusters
-
FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation
A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…
100 articles · Updated November 15, 2025 -
Italy Extradites Chinese Hacker Xu Zewei to the U.S. for COVID-19 Research Theft
Xu Zewei, a 33-year-old Chinese national, was extradited from Italy to the United States on April 27, 2026, following his arrest in Milan on July 3, 2025. He is accused of participating in cyberattacks directed by the…
51 articles · Updated April 26, 2026 -
Powercat Malware Campaign Targets Gamers with Infostealer Disguised as Cheats
A malware campaign named Powercat is delivering a sophisticated infostealer disguised as cheat software for popular games like Roblox and Minecraft. The campaign primarily targets users on gaming and social platforms,…
8 articles · Updated August 3, 2026 -
ShadowPad Malware Exploits WSUS Vulnerability for System Access
Attackers exploited a critical vulnerability in Windows Server Update Services (WSUS), identified as CVE-2025-59287, to deploy ShadowPad malware. This backdoor, associated with China-linked APT groups, allows for full…
2 articles · Updated November 24, 2025
Recent Intelligence Reports
- Powercat Malware Campaign Fake Game Cheats Deliver Infostealer Targeting Discord Roblox And Crypto Wallets — www.threatlocker.com · August 6, 2026
- Fake Roblox Xeno script launcher pushes infostealer, RAT malware — Bleepingcomputer · August 3, 2026
- Fake Xeno Roblox Cheats Deliver Powerful Java Stealer Through Discord and Forums — Bitdefender · August 3, 2026
- G0125 — attack.mitre.org · April 27, 2026
- Attackers deliver ShadowPad via newly patched WSUS RCE bug — Securityaffairs.Co · November 24, 2025
- Chinese Hackers Exploiting WSUS Remote Code Execution Vulnerability to Deploy ... — Gbhackers · November 21, 2025