Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

Hackers hijacked antivirus features to install malware - here's what we know

Hacker hands at work with interface around.
  • CVE-2025-12480 in Triofox allowed zero-day exploitation via improper access control
  • UNC6485 attackers deployed Zoho Assist, AnyDesk, and SSH tunneling for remote access
  • Patch released July 26; newer Triofox version available October 14 for mitigation

Popular remote file sharing and collaboration platform Triofox carried a critical vulnerability that was exploited as a zero-day used to deploy a remote access tool which granted the attackers lateral movement capabilities.

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.