Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

Node2Shell: Node.js Brotli Remote Code Execution Vulnerability

A high-severity out-of-bounds write vulnerability in the Node.js Brotli decoder (Node2Shell) allows remote code execution when processing malformed compressed data.

avatar
Tim Peck@timpeck18 hours ago

12 intel reports

From a VHDX File to a Remcos RAT

Threat actors are utilizing VHDX disk images to deliver Remcos RAT through a multi-stage process involving WMI execution and reflective .NET loading to bypass security controls.

avatar
Ethan Andrews@eandrews
4 months ago
27
Pawn Storm Deploys PRISMEX Suite Targeting European Defense

The Russia-aligned actor Pawn Storm (APT28) is deploying the PRISMEX malware suite via zero-day exploits and advanced steganography to target the Ukrainian defense supply chain and NATO logistics hubs.

avatar
Tim Peck@timpeck
7 months ago
1,102
Page 2 of 2