A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, ...
The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp.
At the moment the script was tested only with London's office of TLSContact and only with French Overseas Territory visa, but it should work at least with regular French visa as well.