Threat actor
PhantomCore
Tracked by CyberSIXT since 26 Sep 2025 · last activity 27 Apr
- CVEs exploited · attributed
- 0
- CVEs also mentioned · not attributed
- 0
- article · all time
- 1
One article so farA coverage timeline appears once a second report names PhantomCore. Until then: The Hacker News, Mon 27 Apr, 12:11 UTC.
CVEs
No CVE is named alongside PhantomCore in CyberSIXT coverage.
- ProUkrainian Hackers Exploit TrueConf Flaw to Hit Russian ServersThe Hacker News · first in our coverage