Threat actor
Head Mare
Tracked by CyberSIXT since 10 Aug
- Articlesall time
- 4
- Articleslast 30 days
- 0
- CVEs exploitedattributed · all time
- 2
- Research reportsall time
- 1
4 articles from 4 outlets since 10 Aug; the latest 66 days ago.
- Article
- First report
- Research report
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 21 Aug · 07:50 UTC | SecurityWeek | CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities |
| Mon 17 Aug · 09:33 UTC | SecurityOnline | Head Mare Uses TrueConf Zero Days to Drop PhantomCore Backdoor |
| Tue 11 Aug · 12:32 UTC | Securelist | Kaspersky uncovers Head Mare APT exploiting TrueConf video flaws |
| Mon 10 Aug · 13:02 UTC | The Hacker News | TrueConf Server bugs let PhantomCore malware replace installers |
) : ""}
Names and sources
- Head Mare
- CyberSIXT coverage, Malpedia, MISP Galaxy
CVEs exploited
2 CVEs an article attributes to Head MareCVE-2026-72529TrueConf Server Missing Authentication for Critical Function Vulnerability · attributed in coverage, 21 Aug · Source articleCVSS9.8CriticalExploited1.5%EPSS6articles
CVE-2026-72530TrueConf Server Code Injection Vulnerability · attributed in coverage, 21 Aug · Source articleCVSS9.5CriticalExploited1.7%EPSS6articles
Vendors targeted
Malware and tools
Malpedia · head_mare 1
MITRE ATT&CK® techniques
No MITRE ATT&CK® techniques are recorded for Head Mare.
- CISA Urges Immediate Patching of Exploited TrueConf VulnerabilitiesSecurityWeek
- Head Mare Uses TrueConf Zero Days to Drop PhantomCore BackdoorSecurityOnline
- Kaspersky uncovers Head Mare APT exploiting TrueConf video flawsSecurelist
- TrueConf Server bugs let PhantomCore malware replace installersThe Hacker News · first in our coverage