Unverified50% confidenceFactExact time
CyberXero is classified by SOCRadar as an economically motivated initial access broker (IAB), with its operations divided into two lines: automated attacks against WordPress websites and online stores worldwide, and targeted attacks against Ukraine's energy and critical infrastructure.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/15/2026
First Seen
Valid until: 1/13/2027
Sources
Related Entities
Related Claims
Unverified一个与俄罗斯有关联的黑客组织UAC-0099针对乌克兰政府和物流目标部署了一款基于.NET的新型远程访问木马ASHVEIN60% similarUnverifiedIANA actually hosts the web service for example.com, making it normally accessible in a browser and returning an informational page.58% similarUnverifiedAdversarial proxy tools (such as Evilginx2 and Modlishka) can relay traffic between users and real websites in real time, stealing session cookies at the moment the user completes MFA verification.58% similarUnverifiedWebMCP is a protocol for standardized communication between AI agents in browsers and web services, driven primarily by Anthropic.57% similarUnverified实时钓鱼代理（AiTM）攻击如开源工具Evilginx2能够在用户与真实服务器之间插入反向代理，实时窃取有效会话令牌，从而绕过2FA56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1034313API
curl https://kongchang.com/api/v1/knowledge/claims/1034313MCP
get_claim(id=1034313)