As cited
Copy frozen at (site build).
threat intel
KNOTWEED Assessment Summary
KNOTWEED deploys Subzero spyware by exploiting zero-day flaws in Adobe Reader and Windows to establish initial access. After compromise, the actor leverages different modules of Subzero to maintain persistence and execute commands on affected systems.
Why it matters: Organizations running Adobe Reader and Windows are exposed to zero-day exploitation by a sophisticated threat actor; patches may not yet exist, making detection and network monitoring critical.
- Source published
- First seen by Cybersecurity Tracker