Tag Archive

#UAT-11587

1 article tagged with #UAT-11587

#AI #AI Agent #AI Agents #AI Defense #AI Security #AI-Agent #AI-Assisted #AI-Assisted Attacks #AI-Driven #AI-Driven Attacks #AI-Driven Threats #AI-Enabled Malware #AI-Powered #AI-Powered Attacks #AI-Powered Malware #API-Abuse #APT #Academic Capture #Accessibility Abuse #Active Directory #Adversarial AI #Agentic AI #Android #Antino #Authentication Bypass #Automated Exploitation #Automation #Autonomous #Autonomous AI #Autonomous Agents #Autonomous Attack #Autonomous Attacks #Autonomous Exploitation #Autonomous Malware #Autonomous Threats #Autonomous-Attack #Backdoor #Banking Fraud #Botnet #C2 #C2 Infrastructure #CISA #CISA KEV #CVE #CVE-2026-58704 #CVE-2026-76461 #CVE-2026-84869 #CVE-2026-85706 #CVE-2026-93616 #Check Point #China #China-Linked #Chrome #Cisco #Cisco Talos #Citrix #Clop #Cloud Security #Cloud-C2 #Credential Harvesting #Credential Theft #Critical Infrastructure #Crypto Fraud #Cryptocurrency #Cyber Espionage #Cyber Extortion #Cyber Intelligence #Cyber Warfare #Cyber-Conflict #Cyber-Defense #Cyber-Espionage #Cyber-Physical #Cybercrime #Cybercriminal #Cybersecurity #DLL Sideloading #Data Breach #Data Exfiltration #Double Extortion #Double-Extortion #Edge Security #Email Security #Emperador #Energy Grid #Enterprise Security #Espionage #Evasion #Exploit Broker #Exploit Brokers #Exploit Kit #Exploitation #Extortion #Exvicy #F5 #FBI #FSB #FamousSparrow #Financial Services #Fire Ant #Firmware Exploitation #Firmware Vulnerability #FortiBleed #Fortinet #Fox Kitten #GPO #GhostContainer #GitLab #GopherWhisper #Grid Security #Healthcare Security #Human Rights #ICS #INC #IRGC #IT/OT Convergence #Incident Response #Industrial Control Systems #Industrial Cybersecurity #Industrial Security #Infostealer #Infrastructure #Infrastructure Security #Intellectual Property #Intelligence #Iran #JDY Botnet #Jewelbug #KEV #Kernel #Kernel Exploitation #Kimsuky #LLM #LLM Security #LLM-Malware #LLMjacking #Latin America #Linux #Lynx #MQTT #MSS #MaaS #Malware #Manufacturing #MedusaLocker #Mercenary #Mercenary Spyware #Midnight Blizzard #Military Intelligence #Mobile Security #Nation-State #NationState #National Security #NetScaler #Network Security #Nimbus Manticore #North Korea #OT #OT Security #OT/ICS #Operation Epic Fury #Operation Riptide #Oracle #PII #PLC #Panzer #Patch Management #Path Traversal #Pegasus #Pentagon #Persistence #Phishing #Polymorphic #Post-Compromise #Privacy #Privilege Escalation #Prompt Injection #Qilin #RCE #RaaS #Ransomware #Remote Access #Root Access #RubyGems #SCADA #SD-WAN #SQL Injection #SSH Tunneling #SaaS-Abuse #Sabotage #ScreenConnect #Shadow AI #ShinyHunters #Social Engineering #Spear-phishing #Spyware #Storm 2570 #Storm-2570 #Supply Chain #Supply Chain Security #Surveillance #SystemBC #Telecom #Telecommunications #Telegram #TheGentlemen #Threat Intelligence #Toy Ghouls #Transportation #Trojan #UAT-11587 #UNC3886 #Ukraine #VMware #Vulnerability #Vulnerability Exploitation #Vulnerability Management #Vulnerability Research #WAF Bypass #Water Sector #Windows Security #Zammad #Zero Trust #Zero-Click #Zero-Day #iOS #macOS

highOct 4, 2026

China-Nexus UAT-11587 Deploys 'Antino' Backdoor via Microsoft 365 Infrastructure

A new China-linked espionage campaign targeting Asian government entities utilizes the novel 'Antino' Rust-based backdoor. The threat actor, UAT-11587, leverages legitimate Microsoft 365 services for C2.

#APT #Espionage #UAT-11587 #Antino #Cloud-C2