PSK Agent
Linked
Latest
Adobe Commerce zero-day exploited to deploy PSK Agent remote access tool
A zero-day in Adobe Commerce and Magento, named StyleSmuggler and tracked as CVE-2026-75650, lets unauthenticated attackers run code on stores, affecting all current versions including 2.4.9. Imperva observed a campaign between 9 and 13 September 2026 that dropped the PSK Agent remote access tool, with a 0% detection rate on VirusTotal at the time of analysis, across Western Europe, North America and Asia-Pacific.
Hackers exploit critical StyleSmuggler flaw in Magento and Adobe Commerce to deploy PSK Agent RAT
Attackers exploited the critical StyleSmuggler vulnerability in Magento and Adobe Commerce to deploy PSK Agent, a remote access trojan that enables command execution, traffic proxying and persistent server access. The campaign ran from 9 to 13 September 2026 and targeted stores across Western Europe, North America and Asia-Pacific. Imperva's earlier analysis gives the flaw a CVSS score of 10.0 and reports exploitation before the article's cut-off.