Unverified50% confidenceFactExact time
In an XML Signature Wrapping (XSW) attack, the attacker inserts a forged assertion into the document while preserving the original legitimate signature node, causing the verification logic to check the signed portion while the application logic uses the forged portion.
1
Sources
50%
Confidence
Long-term
Relevance
9/22/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe attack achieves persistence via registry key values, with the configuration using the string IMBotKing for symmetric encryption.64% similarUnverifiedXSS (Cross-Site Scripting) is one of the most common vulnerabilities in web security, and attackers can steal cookies, session tokens, or other sensitive information by injecting malicious scripts.64% similarVerifiedPrompt injection attacks induce AI agents to execute malicious operations by embedding text disguised as system instructions in code comments, documentation, web content, or even file names.62% similarUnverifiedXZ Utils 后门的恶意代码隐藏在测试用二进制文件中，通过修改后的 m4 构建脚本在编译时提取注入，并通过劫持 RSA_public_decrypt 函数检查特定公钥61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/941993API
curl https://kongchang.com/api/v1/knowledge/claims/941993MCP
get_claim(id=941993)