Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware

Source: The Hacker News | Added:

The Russian group EncryptHub is exploiting a patched vulnerability in Microsoft Windows, specifically the Microsoft Management Console (MMC) framework, to deploy Fickle Stealer malware. This campaign combines social engineering tactics with the exploitation of the CVE-2025-26633 vulnerability, also known as MSC EvilTwin.

---

Impact: Microsoft Windows

In the Wild: Yes

Age: Newly disclosed

Remediation: Update Microsoft Windows to patch the vulnerability.

Read Full Original Article →