TLDR Tech / InfoSec
Hackers breach TrueConf to trojanize client installers with backdoors
The Head Mare hacktivist group exploited unauthenticated access on TCP port 4307 to chain KLCERT-26-057 and KLCERT-26-058 for sandbox escape and SYSTEM-level code execution on TrueConf servers, deploying the PhantomCore and PhantomGraph backdoors and trojanizing client installers. Fixes are available in versions 5.3.9, 5.4.9, and 5.5.5.
Read the full story