Product
TrueConf Client
- First Reported
- Aug 8, 2026
- Latest Reported
- Aug 11, 2026
Reported Context (2)
- Infected TrueConf client installers were used to deliver PhantomCore, while a second backdoor, PhantomGraph, was deployed using web-shell access. Kaspersky Reports Head Mare Exploiting TrueConf Server to Deploy PhantomCore and PhantomGraph
- information from the victim’s environment, access the TrueConf database, and replace the legitimate TrueConf Client installer hosted on the server with a malicious version that contains the PhantomCore backdoor. Kaspersky Finds Head Mare Exploiting TrueConf Flaws to Trojanize Installers
CVE (1)
Malware (3)
Threat Actors (1)
MITRE ATT&CK (16)
Vendors (3)
Products (4)
Tools (1)
Industries (7)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.