Campaign28 Aug 2026·2 sources
Head Mare APT trojanises TrueConf client installers to drop PhantomCore and PhantomGraph backdoors
Kaspersky reports that Head Mare compromised TrueConf video conferencing servers through two flaws that TrueConf fixed on 18 June 2026, then swapped the hosted client installer for a trojanised build delivering the PhantomCore and PhantomGraph backdoors. The campaigns target Russian organisations in six sectors.
Head MareTrueConfPhantomCore+2
