Intel Exchange

Browse public community intelligence reports, source analysis, and threat research.

Cover image for VAPOR PANDA AI-Driven ARTEX Global Espionage Campaign

VAPOR PANDA AI-Driven ARTEX Global Espionage Campaign

VAPOR PANDA is using the ARTEX agentic AI framework and DeepSeek LLM to conduct simultaneous global espionage against foreign ministries and critical infrastructure sectors.

avatar
ills3c Intel&Coffee@Ills3C2 days ago

2 intel reports

Ghost CMS SQL Injection Fueling ClickFix Campaigns

Attackers are exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to steal Admin API keys and inject malicious JavaScript for ClickFix social engineering attacks.

avatar
Tim Peck@timpeck
5 months ago
15
Ghost CMS Exploitation and ClickFix Malware Campaign

Threat actors including Aeternum are exploiting CVE-2026-26980 in Ghost CMS to inject malicious JavaScript loaders that facilitate ClickFix social engineering attacks and malware delivery.

avatar
Tim Peck@timpeck
6 months ago
583