Cato IPS

Reported Context (2)

the lateral movement and follow-on stages, and Cato XOps correlated the activity into a Story, while Cato IPS can help contain future attempts by blocking known-bad infrastructure and disrupting WebSocket-based C2. Cato Details Teams Vishing Delivery of PhantomBackdoor
IPS Protections: Cato IPS detects and blocks malformed OP_COMPRESSED packets and abnormal connection patterns targeting MongoDB. Cato CTRL Details MongoDB CVE-2026-25611 Memory-Exhaustion DoS

CVE (1)

Malware (1)

People (1)

MITRE ATT&CK (8)

Vendors (2)

Products (7)

Tools (1)

Industries (1)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.