Security News Ukraine Warns of CABINETRAT Backdoor + XLL Add-ins Spread via Signal ZIPs TheHackerNews Daniel Bender 01 Oct 2025 CERT-UA warns of September 2025 CABINETRAT (UAC-0245): XLLs in Signal ZIPs drop backdoor that exfiltrates data over TCP.
