Vendor
TrueConf
- First Reported
- Aug 8, 2026
- Latest Reported
- Aug 11, 2026
Reported Context (2)
- Kaspersky reported a July 2026 Head Mare campaign that abused two TrueConf Server vulnerabilities to gain SYSTEM-level code execution, deploy a web shell, and replace legitimate client installers with infected versions Kaspersky Reports Head Mare Exploiting TrueConf Server to Deploy PhantomCore and PhantomGraph
- Head Mare has been exploiting unpatched TrueConf server vulnerabilities to replace legitimate client installers with trojanized versions that deliver the PhantomCore and PhantomGraph backdoors. Kaspersky Finds Head Mare Exploiting TrueConf Flaws to Trojanize Installers
CVE (1)
Malware (3)
Threat Actors (1)
MITRE ATT&CK (16)
Vendors (2)
Products (5)
Tools (1)
Industries (7)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.