Skip to content
The Nexus
DossierENTITY

ReliaQuest

Coverage of ReliaQuest in the Nexus archive.

Earliest in view: Jun 5 · 12:33 UTCMost recent: Aug 19 · 05:39 UTC
Co-mentioned in this coverage
PTC Windchillorganization1FlexPLMorganization1JavaServer Pages (JSP)topic1Product Lifecycle Management (PLM)topic1Microsoft 365topic1Wi-Fi gatewaytopic1business travelerstopic1hotelsplace1conference centersplace1OP-512topic1Microsoft Internet Information Services (IIS)topic1Chinaplace1espionagetopic1web shell frameworktopic1
Recent coverage
  • SECURITYAug 19 · 05:39 UTCTHE HACKER NEWS
    Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data

    New findings revealed a JavaServer Pages (JSP) web shell targeting enterprise Product Lifecycle Management (PLM) software, specifically connected to PTC Windchill and FlexPLM servers. This web shell was deployed after exploiting a critical security flaw and is characterized as an extortion platform capable of mapping sensitive data.

  • SECURITYAug 2 · 11:41 UTCFOX NEWS
    Hotel Wi-Fi phishing attack targets Microsoft logins

    Hackers are tampering with Wi-Fi equipment at hotels and conference centers to redirect users to fake Microsoft 365 login pages, posing risks to business travelers. ReliaQuest reports the campaign has been active since June, affecting multiple industries across U.S. cities through compromised Wi-Fi gateways.

  • SECURITYJun 5 · 12:33 UTCTHE HACKER NEWS
    New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Framework

    Cybersecurity researchers identified a new threat cluster named OP-512 targeting Microsoft IIS servers with a custom web shell framework. ReliaQuest links the espionage-focused activity to China with moderate to high confidence.