Fake Microsoft Store Pages Deliver a RAT That Lets Attackers Watch and Control Windows PCs
A campaign uses fake Microsoft Store product pages to trick Windows users into installing legitimate remote-management software.
Attackers then use that access to deploy...
New BotHelper RAT Lets Attackers Watch Windows Screens in Real Time
A newly analyzed Windows remote access trojan can stream a victim’s screen to an attacker while also running commands, downloading files and maintaining access...
MaaS Malware Builder Automates Creation of Windows Infostealers With Anti-VM Evasion
A Python-based malware builder can generate customized Windows infostealers that avoid some analysis environments, persist after login, and send stolen data to an attacker-controlled...
AvisLoader Windows Malware Uses Tox C2 to Survive Domain Takedowns and Maintain Access
Researchers found it on an exposed staging server alongside a fake document-signing page, supporting tools, and an operator dashboard.
Because its command channel does...
Hackers Hide PowerShell Malware in Registry, PNG and WAV Files to Deploy XMRig Miner
Researchers have uncovered a multi-stage cryptomining campaign that uses PowerShell, Registry-stored payloads, DNS TXT records, PNG images, and WAV audio files to conceal malware...