Malware
BlueBeam
- First Reported
- May 26, 2026
- Latest Reported
- May 26, 2026
Reported Context (2)
- BlueBeam), which has also been used in similar attacks observed by Microsoft in late 2024. KnowledgeDeliver flaw exploited as zero-day to deploy web shells
- The threat actor deployed the BLUEBEAM web shell, tampered with web files, and lured users into installing a fake plugin that ultimately delivered Cobalt Strike BEACON. Mandiant Details KnowledgeDeliver Exploitation via Shared ASP.NET Machine Keys
CVE (1)
Malware (2)
MITRE ATT&CK (8)
Vendors (2)
Products (3)
Tools (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.