The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp.
When Wojciech Kostrzewa, who represents some of Poland's biggest firms, went on a Polish economic mission to Kyiv last month, ...