The Threat CodexMar 26
Operation Storming Tide: A massive multi-stage intrusion campaign
#Mora_001 #Matanbuchus #SystemBC
https://fortgale.com/blog/defence/operation-storming-tide/
Operation Storming Tide: A massive multi-stage intrusion campaign

In February 2026, the Fortgale Incident Response team investigated a multi-stage intrusion attributed to Mora_001, a Russian-origin threat actor exploiting Fortinet vulnerabilities. The campaign, internally dubbed "FortiSync Quasar," revealed an evolution from ransomware operations to strategic espionage, deploying Matanbuchus 3.0, Astarion RAT, and SystemBC. Rapid containment prevented any data exfiltration.

Fortgale Blog
Rene RobichaudJan 30

Matanbuchus Malware Downloader Evading AV Detections by Changing Components
https://cybersecuritynews.com/matanbuchus-malware-downloader-evading-av-detections/

#Infosec #Security #Cybersecurity #CeptBiro #Matanbuchus #MalwareDownloader #Evading #AVDetections

RF WaveJul 20, 2025

Security researchers reveal campaign distributing malware through Microsoft Teams

Attack:
- Attackers impersonate IT helpdesk
- Tricks users into downloading the Matanbuchus loader
- The loader in turn can collect information, run commands, and download other malware

#cybersecurity #socialengineering #Matanbuchus

https://www.bleepingcomputer.com/news/security/microsoft-teams-voice-calls-abused-to-push-matanbuchus-malware/

Microsoft Teams voice calls abused to push Matanbuchus malware

The Matanbuchus malware loader has been seen being distributed through social engineering over Microsoft Teams calls impersonating IT helpdesk.

BleepingComputer
dhanrajleelaJul 18, 2025

https://technologiesinternetz.blogspot.com/2025/07/microsoft-teams-voice-calls-abused-to.html

Microsoft Teams Voice Calls Abused to Push Matanbuchus Malware

#microsoft #matanbuchus #malware #voice #call

Rene RobichaudJul 17, 2025

Microsoft Teams Exploited to Deliver Matanbuchus Ransomware Payload
https://gbhackers.com/microsoft-teams-exploited/

#Infosec #Security #Cybersecurity #CeptBiro #MicrosoftTeams #Exploited #Matanbuchus #Ransomware #Payload

Microsoft Teams Exploited to Deliver Matanbuchus Ransomware Payload

A sophisticated cyberattack campaign has emerged targeting organizations through Microsoft Teams impersonation.

GBHackers Security | #1 Globally Trusted Cyber Security News Platform