The APT group Head Mare is exploiting unpatched TrueConf servers to deliver PhantomCore and PhantomGraph malware to participants in video conferences. The article does not provide specific vulnerability identifiers, CVSS scores, affected version ranges, fixed versions, or workarounds.
2026-08-07 (Back to Inventory) The APT group Head Mare exploits vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph malware to video conferencing participants Author(s): Kaspersky Organization: Kaspersky win.phantomcore win.phantomgraph Open article directly Related Articles 2026-04-30 ⋅ Kaspersky ⋅ Anna Lazaricheva , Anton Kargin , Victoria Vlasova , Vladimir Gursky Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India ABCDoor 2026-02-17 ⋅ Kaspersky ⋅ Kaspersky Kaspersky discovers Keenadu – a multifaceted Android malware that can come preinstalled on new devices Keenadu 2025-12-29 ⋅ Kaspersky ⋅ Noushin Shabab The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor PlugX TONESHELL