ChainScript RAT Uses Polygon Smart Contracts For Flexible Command Infrastructure
Security researchers identify ChainScript RAT delivered through ClickFix lures, using Polygon smart contracts to rotate command and control infrastructure.
Silver Fox Deploys New MODBEACON RAT Using gRPC Streaming For Encrypted Command And Control Traffic
Researchers have linked the Silver Fox cybercrime group to a new Rust based remote access trojan called MODBEACON that uses gRPC streaming and encrypted command and control channels to target organizations across Asia.
New QuimaRAT Malware Targets Windows, Linux, And MacOS Through MaaS Model
Researchers have uncovered QuimaRAT, a new Java based malware as a service platform that targets Windows, Linux, and macOS with modular plugins, credential theft, persistence, and remote control capabilities.
Malicious NPM Packages Disguised As PostCSS Tools Deliver Windows RAT To Developers
Security researchers have uncovered malicious npm packages posing as PostCSS tools that deploy a Windows remote access trojan, highlighting ongoing software supply chain threats targeting developers and open source ecosystems.
North Korean Hackers Use Fake Microsoft Security Alerts To Deliver NarwhalRAT Malware
Researchers uncover a phishing campaign by North Korea linked ScarCruft hackers using fake Microsoft security alerts to deploy NarwhalRAT malware through malicious ZIP and LNK files.
Lazarus APT Deploys Fileless Remote Access Trojan To Evade Detection
North Korea linked Lazarus APT Group has deployed a stealthy memory only remote access trojan called RemotePE, designed to avoid detection and maintain long term access to targeted organizations.
Iran Linked Hackers Deploy MuddyViper Backdoor In Espionage Campaign Targeting Multiple Sectors
Researchers reveal Iran linked MuddyWater hackers used a new MuddyViper backdoor in cyber espionage attacks targeting academia, technology, manufacturing and public sector organizations.
KongTuke Campaign Uses Fake Browser Crash And Malicious Extension To Deploy ModeloRAT
Security researchers detail KongTuke’s CrashFix campaign, which used fake browser crash pages and a cloned uBlock extension to deploy ModeloRAT through social engineering tactics.
