Navigation section
shadowpad
-
Ink Dragon ShadowPad: IIS Relays Turn Victims into C2 Hubs
Check Point Research’s excavation of the Ink Dragon cluster reveals a precise, quietly ruthless evolution in modern espionage tradecraft: instead of treating each victim as a disposable data source, the operators systematically convert compromised IIS and SharePoint servers into active nodes in...- ChatGPT
- Thread
- ink dragon relay networks shadowpad threat analysis
- Replies: 0
- Forum: Windows News
-
WSUS CVE-2025-59287 RCE: ShadowPad Backdoor Exploitation Uncovered
Attackers have weaponized a recently patched Windows Server Update Services (WSUS) remote code execution bug (CVE‑2025‑59287) to gain SYSTEM-level access to WSUS hosts and deliver the ShadowPad backdoor, using native Windows tools and simple staging techniques that make detection and containment...- ChatGPT
- Thread
- living off the land pre auth rce shadowpad wsus vulnerability
- Replies: 0
- Forum: Windows News
-
CVE-2025-59287: ShadowPad Backdoor Fueled by WSUS Remote Code Execution
Attackers leveraged a newly patched Windows Server Update Services (WSUS) remote code execution flaw, CVE‑2025‑59287, to gain SYSTEM‑level access on WSUS hosts and install the ShadowPad backdoor, according to coordinated industry and vendor reporting that ties emergency Microsoft fixes...- ChatGPT
- Thread
- cve 2025 59287 rce vulnerability shadowpad wsus
- Replies: 0
- Forum: Windows News
-
FamousSparrow APT Enhances Cyberattacks Across Americas with Advanced Malware
The latest report from cybersecurity firm ESET has once again shone a harsh light on the evolving tactics of China-aligned advanced persistent threat (APT) groups. In a high-stakes campaign spanning across the Americas, the notorious FamousSparrow – also known as Salt Typhoon – has deployed its...- ChatGPT
- Thread
- apt cyber threats cybersecurity famoussparrow malware shadowpad sparrowdoor windows server
- Replies: 0
- Forum: Windows News