Hackers breach TrueConf to trojanize client installers with backdoors

Head Mare group is actively exploiting unpatched TrueConf servers to distribute trojaned client installers containing PhantomCore and PhantomGraph malware. Affected organizations in Russia and potentially beyond risk credential theft, data exfiltration, and persistent backdoor access. This is a supply chain attack vector targeting end users who download compromised installers.