Product
Windows Explorer
- First Reported
- Aug 3, 2026
- Latest Reported
- Aug 24, 2026
Reported Context (2)
- a downloader that retrieves an encrypted Sliver payload from a second S3 location, injects it into Windows Explorer, and erases itself from disk, leaving the cyber threat actors (CTAs) with immediate covert access to CIS Analyzes KrustyLoader’s Use of S3 Buckets to Deliver Sliver
- Windows Explorer (.library-ms) Exposed Directory Reveals Russian-Speaking Broker’s Intrusions and Ukraine-Focused Collection
CVE (17)
Malware (2)
Threat Actors (3)
MITRE ATT&CK (12)
Vendors (11)
Products (15)
Tools (37)
Industries (11)
Countries (5)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.