Threats

Affected Platforms: Microsoft Windows
Impacted Users: Any organization
Impact: Attackers gain control of the infected systems
Severity Level: High

Affected Platforms: Amazon Web Services (AWS)
Impacted Users: Any organization
Impact: Stolen cloud credentials result in significant financial losses and data breaches of sensitive information.
Severity Level: High

Affected Platforms: Microsoft Windows
Impacted Users: Microsoft Windows
Impact: The stolen information can be used for future attacks
Severity Level: High

Affected Platforms: Microsoft Windows
Impacted Users: Any organization
Impact: Attackers gain control of the infected systems or stolen data may be leveraged for follow-on attacks
Severity Level: High

Affected Platforms: Microsoft Windows
Impacted Users: Windows Users
Impact: Fully Control the Victim’s Computer
Severity Level: High

Affected Platforms: Windows Endpoints
Impact Parties: QuickFox Users
Impact: Supply chain attack resulting in the installation of an implant for persistent access.
Severity Level: Medium

Affected Platforms: Linux
Impacted Users: Any organization
Impact: Remote attackers gain control of the vulnerable systems
Severity Level: Critical

Affected Platforms: Amazon Web Services (AWS), Amazon Bedrock
Threat Type: Cloud credential theft, AI/LLM service hijacking (“LLMjacking”)
Impacted Users: Any organization with AWS accounts
Impact: Unauthorized consumption of paid foundation-model inference, resulting in direct financial loss; potential resale of hijacked model access
Severity Level: High