Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants

The Head Mare APT group is leveraging unpatched TrueConf server vulnerabilities to covertly replace legitimate client installers with malware, enabling the widespread delivery of advanced backdoors like PhantomCore and PhantomGraph to video conference participants across multiple industries.