Ukraine Warns of CABINETRAT Backdoor + XLL Add-ins Spread via Signal ZIPs
- Posted on October 1, 2025
- By The Hacker News
- 3 Views

Ukraine Warns of CABINETRAT Backdoor + XLL Add-ins Spread via Signal ZIPs

CERT-UA warns of September 2025 CABINETRAT (UAC-0245): XLLs in Signal ZIPs drop backdoor that exfiltrates data over TCP.