Hackers exploited CVE-2025-64328, a FreePBX command injection vulnerability, to infect hundreds of instances with web shells.
Trojanized gaming tools and new Windows RATs like Steaelite enable data theft, ransomware, and persistent remote control.