Zero-Day VulnerabilitiesconfirmedยทKaspersky Securelist

Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload

Published: 22.05.2026 11:12Fetched: 23.05.2026 02:42

Summary

Cloud Atlas attacks the public sector and diplomatic structures of Russia and Belarus, using ReverseSocks, SSH, and Tor for persistence in infected systems and its new tool, PowerCloud.

Source

Source: Kaspersky Securelist
Trust Level: โ˜…โ˜…โ˜…โ˜…โ˜†