The APT group HoneyMyte has updated its CoolClient backdoor with a kernel-level Windows rootkit to make detection harder. Here's what admins can do.
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
Kaspersky has documented an updated CoolClient backdoor that's targeting governments in Asia with a kernel-level Windows rootkit.
Paul Hill
Neowin
@ziks_99 ·
HoneyMyte deploys an updated CoolClient backdoor with a signed Windows rootkit that hides malicious processes, files, registry…
Russian APT Turla transformed its Kazuar backdoor into a modular P2P botnet for persistent government access. Microsoft, Palo…
Hackers are exploiting a critical-severity Windows Netlogon vulnerability (CVE-2026-41089) for remote code execution.
Recorded Future links HOOKEDGE campaigns targeting European government and diplomatic organizations to APT28 with moderate…
Mind the patch gap, please and thank you
Unit 42 links CL-STA-1062 to TinyRCT, a custom .NET backdoor used against government and energy targets in Southeast Asia.
