Filename

wtsapi32.dll

Confidence: ai extracted

Linked Entities 2

threat actor Head Mare malware PhantomCore

Source Articles 4

Hackers abuse ViPNet software to target Russian govt agencies

bleeping-computer Jul 19, 2026

HelloNet campaign: new malicious modules launched through the ViPNet update system

securelist Jul 16, 2026

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm

hacker-news Jul 31, 2026

TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore

hacker-news Aug 10, 2026