ClickFix Social Engineering Fuels Matanbuchus 3.0 AstarionRAT Attack

Back Cyberpress

ClickFix Social Engineering Fuels Matanbuchus 3.0 AstarionRAT Attack

Cyberpress • February 18, 2026

Share: View original

Cybersecurity researchers uncovered a sophisticated attack chain where attackers used ClickFix social engineering to deliver Matanbuchus 3.0.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Matanbuchus 3.0 Launches AstarionRAT via ClickFix and Silent MSI Installations Matanbuchus 3.0, a Malware-as-a-Service loader, has re-emerged in February 2026 after nearly a year of inactivity. This version introduces ClickFix social engineering tactics and silent MSI installations to deploy AstarionRAT, with a subscription fee now reaching up to $15,000 per month, indicating a shift towards high-value targets. 3 sources 31

Extracted Entities

Attack Types (1)

Malware (3)

AstarionRAT ClickFix Matanbuchus