PamDOORa Linux Backdoor & OTP Theft via Windows Phone LinkOriginally published on satyamrastogi.com PamDOORa Linux backdoor abuses PAM authentication framework for stealth persistence. Windows Phone Link OTP theft exploits mobile OS trust boundaries. Eurasian drone industry under coordinated spy operation-...May 10, 2026·6 min read
Quick Page/Post Redirect Plugin: 5-Year Dormant Backdoor in 70K WordPress SitesOriginally published on satyamrastogi.com 70,000+ WordPress sites compromised via dormant backdoor in Quick Page/Post Redirect plugin. Five-year persistence, arbitrary code injection, unpatched vulnerability demonstrates plugin ecosystem supply chai...Apr 30, 2026·5 min read
OpenEMR 38-Vulnerability Chain: Patient Data Exfil & TamperingOriginally published on satyamrastogi.com 38 vulnerabilities discovered in OpenEMR medical software enable attackers to access, modify, and exfiltrate sensitive patient health information (PHI). Analysis of exploitation techniques, affected healthca...Apr 29, 2026·6 min read
Silk Typhoon Extradition: State-Sponsored APT Operator Accountability & Persistence TTPsOriginally published on satyamrastogi.com Xu Zewei's extradition marks rare accountability for state-sponsored operators. Analysis of Silk Typhoon's targeting methodology, C2 infrastructure, credential harvesting tactics, and implications for blue t...Apr 28, 2026·7 min read
Zimbra XSS at Scale: Exploiting 10K+ Servers in Enterprise EmailOriginally published on satyamrastogi.com 10,000+ Zimbra Collaboration Suite instances vulnerable to active XSS exploitation. Attack chain enables session hijacking, credential theft, and lateral movement. Analysis of exploitation patterns and defen...Apr 25, 2026·6 min read
Tropic Trooper: Home Router Exploitation & Japanese Infrastructure TargetingOriginally published on satyamrastogi.com Tropic Trooper pivots from traditional enterprise targets to home routers and ISP infrastructure serving Japanese organizations. Analysis of expanded TTPs, targeting methodology, and defensive implications f...Apr 24, 2026·7 min read
France Titres Breach: Government Document Authority TargetedOriginally published on satyamrastogi.com France Titres, the government agency responsible for issuing and managing French administrative documents, confirmed a data breach after threat actors advertised stolen citizen records for sale on undergroun...Apr 22, 2026·6 min read
