Cheshire

Cheshire Pre-Flight-Payload-QA für Adaptix, unterstützt von LitterBox. Cheshire ist ein Adaptix C2 Service Plugin, das den Adaptix-Client mit einer LitterBox-Sandbox verbindet. Von innerhalb der Adaptix-Oberfläche kann ein Operator eine beliebige Binärdatei auswählen, sie durch LitterBoxs...

Maverick

Maverick Ein Adaptix C2-Agent, erstellt mit Crystal Palace – einem benutzerdefinierten PIC Position Independent Code Linker und PICO-Modulsystem. Demonstriert, wie modulare Shellcode-Agenten gebaut werden, bei denen jede Komponente Transport, Aufgaben, Verschleierung ein separates PICO-Blob ist,...

GeckoDroid

GeckoDroid Client mobile per Adaptix C2 Framework. Accesso completo dell'operatore dal tuo dispositivo Android. Cosa fa GeckoDroid ti dà il controllo del tuo server Adaptix C2 da qualsiasi luogo. Invece di stare seduto al tuo client desktop, puoi gestire le operazioni in movimento. Agenti - Vedi...

Tropic Trooper Uses Trojanized SumatraPDF and GitHub to Deploy AdaptixC2

Chinese-speaking individuals are the target of a new campaign that uses a trojanized version of SumatraPDF reader to deploy the AdaptixC2 Beacon post-exploitation agent and ultimately facilitate the abuse of Microsoft Visual Studio Code VS Code tunnels for remote access. Zscaler ThreatLabz, which...

Tomiris wreaks Havoc: New tools and techniques of the APT group

While tracking the activities of the Tomiris threat actor, we identified new malicious operations that began in early 2025. These attacks targeted foreign ministries, intergovernmental organizations, and government entities, demonstrating a focus on high-value political and diplomatic...

Russian Hackers Exploit Adaptix Pentesting Tool in Ransomware Attacks

Silent Push wars of Russian hackers exploiting Adaptix, a pentesting tool built for Windows, Linux, and macOS, in ransomware campaigns...

CountLoader Broadens Russian Ransomware Operations With Multi-Version Malware Loader

Cybersecurity researchers have discovered a new malware loader codenamed CountLoader that has been put to use by Russian ransomware gangs to deliver post-exploitation tools like Cobalt Strike and AdaptixC2, and a remote access trojan known as PureHVNC RAT. "CountLoader is being used either as par...