PhantomCore exploited three TrueConf flaws since September 2025, enabling remote access and lateral movement across Russian ...
The threat actor infected victims with the Snow malware family – Snowbelt, Snowglaze, and Snowbasin – for persistent access.