+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: New "Cavalry Werewolf" Attack Hits Russian Agencies with FoalShell and StallionRAT (/showthread.php?tid=6311010)
New "Cavalry Werewolf" Attack Hits Russian Agencies with FoalShell and StallionRAT - Stanley - Oct 12, 2025
New "Cavalry Werewolf" Attack Hits Russian Agencies with FoalShell and StallionRAT
A threat actor that's known to share overlaps with a hacking group called YoroTrooper has been observed targeting the Russian public sector with malware families such as FoalShell and StallionRAT.
Cybersecurity vendor BI.ZONE is tracking the activity under the moniker Cavalry Werewolf. It's also assessed to have commonalities with clusters tracked as SturgeonPhisher, Silent Lynx, Comrade Saiga,
https://thehackernews.com/2025/10/new-cavalry-werewolf-attack-hits.html
RE: New "Cavalry Werewolf" Attack Hits Russian Agencies with FoalShell and StallionRAT - Oh_Well - Oct 13, 2025
Interesting twist.. They show how fragmented the cyber landscape has become. Espionage-grade tools wrapped in stealth and persistence.
RE: New "Cavalry Werewolf" Attack Hits Russian Agencies with FoalShell and StallionRAT - Vectura - Oct 13, 2025
That’s an interesting twist, most often we hear about Russian-linked actors going after others, not the other way around. The Cavalry Werewolf campaign seems like a reminder that cyber espionage is far from one-sided. The fact that it overlaps with groups like YoroTrooper and uses multiple RATs like FoalShell and StallionRAT suggests a well-coordinated and evolving operation. It’ll be worth watching how Russia responds to this, especially if government agencies were directly impacted.
RE: New "Cavalry Werewolf" Attack Hits Russian Agencies with FoalShell and StallionRAT - plops - Oct 13, 2025
Definitely a reminder that it doesn't just come from one side. I think we just dont get to see the other sides news always.
RE: New "Cavalry Werewolf" Attack Hits Russian Agencies with FoalShell and StallionRAT - Aeowulf - Oct 13, 2025
Love to see it. Its about time some nasty stuff goes that way.
RE: New "Cavalry Werewolf" Attack Hits Russian Agencies with FoalShell and StallionRAT - leste - Oct 30, 2025
Overlaps with YoroTrooper show these threat groups are collaborating.
RE: New "Cavalry Werewolf" Attack Hits Russian Agencies with FoalShell and StallionRAT - B3A - Oct 31, 2025
(Oct 13, 2025 06:46 AM)plops Wrote: Definitely a reminder that it doesn't just come from one side. I think we just dont get to see the other sides news always.
Nothing comes one sided. You have to do something to get them access