TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore
A threat actor known as Head Mare has been observed exploiting security flaws in TrueConf servers to attack Russian companies. These vulnerabilities have reportedly been weaponized to replace client installers with malicious software. The claims regarding the effectiveness of these attacks are not independently verified.
Claims & verification status
The effectiveness of the attacks exploiting TrueConf server flaws is not independently verified.
A threat actor known as Head Mare has been observed exploiting security flaws in TrueConf servers to attack Russian companies.
+1 more claim on the 7-day Pro trial.
Impact analysis
Who claims what
- —A threat actor known as Head Mare has been observed exploiting security flaws in TrueConf servers to attack Russian companies — not independently verified.
- —The vulnerabilities in TrueConf servers have reportedly been weaponized to replace client installers with malicious software — not independently verified.
Our assessment
If the reported exploitation of TrueConf server vulnerabilities is accurate, there is increased risk of malware infection for organizations using the affected software in Russia.…