⤷ Title: Russian-Linked Curly COMrades Deploy MucorAgent Malware in Europe
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 12 Aug 2025 15:26:38 +0000
════════════════════════
⌗ Tags: #Security #Malware #Curly COMrades #Cyber Attack #Cybersecurity #europe #MucorAgent #Russia
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 12 Aug 2025 15:26:38 +0000
════════════════════════
⌗ Tags: #Security #Malware #Curly COMrades #Cyber Attack #Cybersecurity #europe #MucorAgent #Russia
Hackread
Russian-Linked Curly COMrades Deploy MucorAgent Malware in Europe
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
⤷ Title: “Curly COMrades” Group Unmasked: Russian Threat Actors Deploy New Backdoor in Geopolitical Espionage Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 Aug 2025 00:35:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitdefender #Curly COMrades #cyber_espionage #cybersecurity #Georgia #malware #Moldova #MucorAgent #russia
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 14 Aug 2025 00:35:32 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitdefender #Curly COMrades #cyber_espionage #cybersecurity #Georgia #malware #Moldova #MucorAgent #russia
Daily CyberSecurity
"Curly COMrades" Group Unmasked: Russian Threat Actors Deploy New Backdoor in Geopolitical Espionage Campaign
Bitdefender Labs uncovers "Curly COMrades," a Russian-aligned cyber-espionage group using a new backdoor, MucorAgent, to target government and energy sectors.
⤷ Title: Curly COMrades: The Stealthy Cyber-Espionage Group You Haven’t Heard Of
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 14 Aug 2025 07:38:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitdefender #Curly COMrades #Cyber Espionage #cybercrime #cybersecurity #Georgia #LOLBins #Moldova #MucorAgent
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 14 Aug 2025 07:38:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitdefender #Curly COMrades #Cyber Espionage #cybercrime #cybersecurity #Georgia #LOLBins #Moldova #MucorAgent
Penetration Testing Tools
Curly COMrades: The Stealthy Cyber-Espionage Group You Haven't Heard Of
Meet Curly COMrades, a new cyber-espionage group targeting government and energy sectors in Georgia & Moldova using custom malware and stealthy, common tools.
⤷ Title: Curly COMrades APT Bypasses EDR by Hiding Linux Backdoor Inside Covert Hyper-V VM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 06 Nov 2025 00:17:01 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Curly COMrades #CurlyShell #cyber_espionage #EDR Bypass #Hyper_V #Linux VM #Russian APT #virtualization
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 06 Nov 2025 00:17:01 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Curly COMrades #CurlyShell #cyber_espionage #EDR Bypass #Hyper_V #Linux VM #Russian APT #virtualization
Daily CyberSecurity
Curly COMrades APT Bypasses EDR by Hiding Linux Backdoor Inside Covert Hyper-V VM
Bitdefender exposed Curly COMrades (Russian APT) using Hyper-V to run a hidden Alpine Linux VM. The VM hosts the CurlyShell backdoor, effectively bypassing host-based EDR for espionage.
⤷ Title: Virtual Walls: Curly COMrades Hides Attacks in Hyper-V VMs to Evade Detection
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 06:00:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Alpine Linux #Curly COMrades #cybersecurity #Evasion #Hyper_V #reverse shell #Threat Actors #Virtualization
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 06:00:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Alpine Linux #Curly COMrades #cybersecurity #Evasion #Hyper_V #reverse shell #Threat Actors #Virtualization
Penetration Testing Tools
Virtual Walls: Curly COMrades Hides Attacks in Hyper-V VMs to Evade Detection
The Curly COMrades group uses Windows Hyper-V to create tiny, isolated Linux VMs for executing malware, bypassing native detection systems.
⤷ Title: Amazon: Russian GRU hackers favor misconfigured devices over vulnerabilities
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 17:55:38 +0000
════════════════════════
⌗ Tags: #Security #0day #Amazon #APT44 #AWS #Curly COMrades #Cyber Attack #Cyber Crime #Cybersecurity #GRU #Malware #Russia #Sandworm #Seashell Blizzard #Vulnerability
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 16 Dec 2025 17:55:38 +0000
════════════════════════
⌗ Tags: #Security #0day #Amazon #APT44 #AWS #Curly COMrades #Cyber Attack #Cyber Crime #Cybersecurity #GRU #Malware #Russia #Sandworm #Seashell Blizzard #Vulnerability
Hackread
Amazon: Russian GRU hackers favor misconfigured devices over vulnerabilities
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
⤷ Title: Sandworm’s Tactical Pivot: Russian GRU Abandons Zero-Days to Weaponize Misconfigured Edge Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 01:57:59 +0000
════════════════════════
⌗ Tags: #Cyber Security #Amazon Threat Intelligence #APT44 #Credential Replay #Critical Infrastructure #Curly COMrades #Edge Device #GRU #misconfiguration #SANDWORM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 01:57:59 +0000
════════════════════════
⌗ Tags: #Cyber Security #Amazon Threat Intelligence #APT44 #Credential Replay #Critical Infrastructure #Curly COMrades #Edge Device #GRU #misconfiguration #SANDWORM
Daily CyberSecurity
Sandworm’s Tactical Pivot: Russian GRU Abandons Zero-Days to Weaponize Misconfigured Edge Devices
Sandworm (APT44) has shifted tactics, favoring misconfigured edge devices over complex exploits to breach energy and telecom sectors via credential replay.