The ‘Head Mare’ hacktivist group has exploited vulnerabilities in unpatched TrueConf video conferencing servers. They are replacing legitimate client installers with malicious versions that deliver backdoors to unsuspecting users. This supply chain attack vector allows the group to compromise systems of TrueConf clients.