Our CERT is releasing a new research into UNC2465, a ransomware affiliate actively distributing Qilin across Europe 🇪🇺.

A TLP:RED version of this research was presented during @botconf
2026.

https://www.orangecyberdefense.com/global/blog/cert-news/smoking-out-an-affiliate-smokedham-qilin-a-few-google-ads-and-some-bossware

UNC2465 primarily relies on malvertising to distribute the SmokedHam backdoor. By pivoting on its delivery infrastructure, we identified a large number of spoofed software like RVTools, @hornetsecurity
, Angry IP Scanner, Remote Desktop Manager...

UNC2465 also relies on bossware like ControlioNet and Teramindco to further blend malicious actions with normal activity and avoid detection.

IOCs are available here:

https://github.com/cert-orangecyberdefense/cti/blob/main/smokedham/iocs

#CTI #ThreatIntel #SmokedHam #UNC2465 #ransomware #Qilin #rvtools #bossware

RVTools, a trusted VMware tool, turned into a Trojan horse—a compromised installer injected with a sneaky malicious DLL unleashed Bumblebee malware. Curious how this breach happened and what you can do to stay protected?

https://thedefendopsdiaries.com/understanding-the-rvtools-supply-chain-attack-lessons-and-prevention/

#supplychainattack
#rvtools
#bumblebeemalware
#cybersecurity
#malwareprevention

⚠️ #RVTools installer on its official site was found delivering malware. Research shows it spread #Bumblebee loader.

Read: https://hackread.com/compromised-rvtools-installer-drop-bumblebee-malware/

#CyberSecurity #Malware #Scam #InfoSec

Hackers Leverage RVTools to Attack Windows Users With Bumblebee Malware
https://cybersecuritynews.com/hackers-leverage-rvtools-with-bumblebee-malware/

#vmware #RVTools

ZeroDay Labs report that the download for RVTools, a tool commonly used to inventarize and assess VMware infrastucture (and supported by Dell), had been trojanized for the past couple of days: https://zerodaylabs.net/rvtools-bumblebee-malware/

The rvtools web site was already offline in its May 8 archive.org snapshot, so this has probably been going on over a week ago. Apparently the last clean version was 4.7.1 with the sha256 hash 0506126bcbc4641d41c138e88d9ea9f10fb65f1eeab3bff90ad25330108b324c

#infosec #vmware #rvtools

RV Tool Kits: Essential Tools for Any RV Adventure

Ensuring you're equipped to handle any situation on the road is crucial. This isn't just about packing the right snacks or planning the perfect route; it's about being ready for the unexpected bumps along the journey. That's where the significance of well-stocked RV tool kits comes into play.....

#rvtools #rvtoolkit

https://rvtravellife.com/rv-tool-kits-essential-tools-for-any-rv-adventure

Well done Rob de Veij 👏

Eines der hilfreichsten Tools im #VMware Kontext gehört nun zur @dell Familie und ergänzt so das Portfolio.

#Dell ist bestrebt, #RVTools weiterhin als kostenlosen öffentlichen Download zur Verfügung zu stellen.

https://www.robware.net/rvtools/about/

#vExpert #vCommunity