Malware & Threats New ‘Mistic’ RAT Opens Door to Several Ransomware Families Mistic is used by Woodgnat, an initial access broker working with Qilin, Interlock, Rhysida, Akira, 8Base, and Black Basta. Ionut ArghireJune 24, 2026
Mobile & Wireless Mirax RAT Targeting Android Users in Europe Offered as a MaaS to a small number of affiliates, mainly Russian speakers, the RAT can turn devices into residential proxy nodes. Ionut ArghireApril 15, 2026
Malware & Threats Fake Claude Website Distributes PlugX RAT The malware mimics the legitimate Anthropic installation, relies on DLL sideloading, and cleans up after itself. Ionut ArghireApril 13, 2026
Malware & Threats Sophisticated CrystalX RAT Emerges The malware can spy on victims, steal their information, and make configuration changes on devices. Ionut ArghireApril 2, 2026
Malware & Threats Microsoft Warns of ClickFix Attack Abusing DNS Lookups Attackers are using DNS requests to deliver a RAT named ModeloRAT to targeted users. Eduard KovacsFebruary 16, 2026
Malware & Threats Hugging Face Abused to Deploy Android RAT Android users were lured to applications that served a malicious payload hosted in a Hugging Face repository. Ionut ArghireJanuary 30, 2026
Malware & Threats Malicious Chrome Extension Crashes Browser in ClickFix Variant ‘CrashFix’ Posing as an ad blocker, the malicious extension crashes the browser to lure victims into installing malware. Ionut ArghireJanuary 19, 2026
Malware & Threats Sophisticated ClickFix Campaign Targeting Hospitality Sector Fake Booking reservation cancellations and fake BSODs trick victims into executing malicious code leading to RAT infections. Ionut ArghireJanuary 6, 2026
Malware & Threats France Probes ‘Foreign Interference’ After Remote Control Malware Found on Passenger Ferry France’s counterespionage agency is investigating a suspected cyberattack plot targeting an international passenger ferry Associated PressDecember 18, 2025
Malware & Threats New $150 Cellik RAT Grants Android Control, Trojanizes Google Play Apps The malware provides full device control and real-time surveillance capabilities like those of advanced spyware. Ionut ArghireDecember 17, 2025
Malware & Threats Threat Actor Infests Hotels With New RAT RevengeHotels has been targeting hotels in Brazil and Spanish-speaking regions with VenomRAT implants in 2025. Ionut ArghireSeptember 18, 2025
Malware & Threats New Interlock RAT Variant Distributed via FileFix Attacks The Interlock ransomware group has partnered with the KongTuke TDS to distribute a new RAT variant via FileFix attacks. Ionut ArghireJuly 14, 2025
Malware & Threats Cloudflare Tunnels Abused in New Malware Campaign A threat actor is abusing Cloudflare Tunnels for the delivery of a Python loader as part of a complex infection chain. Ionut ArghireJune 20, 2025
Malware & Threats Popular Scraping Tool’s NPM Package Compromised in Supply Chain Attack Supply chain attack compromises the popular rand-user-agent NPM package to deploy and activate a backdoor. Ionut ArghireMay 9, 2025
Malware & Threats Microsoft Warns of New StilachiRAT Malware Microsoft has shared details on StilachiRAT, an evasive and persistent piece of malware that facilitates sensitive data theft. Eduard KovacsMarch 19, 2025
Malware & Threats FBI Warns of HiatusRAT Attacks on Cameras, DVR Systems FBI says HiatusRAT’s operators were seen scanning for web cameras and DVR systems affected by years-old vulnerabilities. Ionut ArghireDecember 17, 2024
Malware & Threats BingoMod Android RAT Wipes Devices After Stealing Money The BingoMod Android trojan steals user information and communication and allows attackers to steal money via account takeover. Ionut ArghireAugust 1, 2024
Cybercrime Two People Arrested in Australia and US for Development and Sale of Hive RAT Authorities in Australia and the US have arrested and charged two individuals for developing and selling the Hive RAT. Ionut ArghireApril 15, 2024
Cybercrime Warzone RAT Shut Down by Law Enforcement, Two Arrested Warzone RAT dismantled in international law enforcement operation that also involved arrests of suspects in Malta and Nigeria. Eduard KovacsFebruary 12, 2024
Cybercrime Researchers Uncover Real Identity of CypherRAT and CraxsRAT Malware Developer Cyfirma security researchers uncover the real identity of the CypherRAT and CraxsRAT malware developer and MaaS operator. Ionut ArghireAugust 21, 2023