Malware

Skuld

Also known as: TMPN

Skuld, also known as TMPN Stealer, is an information-stealing malware written in Golang (Go) that emerged in May 2023.

Indicators of Compromise 1

Domain webhook[.]site

MITRE ATT&CK TTPs 6

Exploitation for Privilege Escalation

Privilege Escalation

Defense Evasion

System Information Discovery

Firmware Corruption

Source Articles

Newly Patched Critical Microsoft WSUS Flaw Comes Under Active Exploitation

A critical remote code execution vulnerability in Microsoft WSUS, tracked as CVE-2025-59287, is under active exploitation with public proof-of-concept code available. The flaw stems from unsafe deserialization of AuthorizationCookie objects via the BinaryFormatter, allowing unauthenticated attackers to execute arbitrary code with SYSTEM privileges. Exploitation has been observed in the wild, with threat actors targeting publicly exposed WSUS instances to deploy PowerShell payloads for reconnaissance and potential supply chain attacks. Organizations are urged to apply emergency patches immediately, as unpatched systems are at high risk of compromise.