AdaptixC2 Misused in Ransomware Operations Worldwide

First seen 2 Dec 2025, 18:33 UTC • Infosecurity-Magazine

•47

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Cybercriminals are increasingly exploiting AdaptixC2, a free emulation framework initially designed for penetration testing, for malicious payload delivery in ransomware attacks. This trend follows the release of new detection signatures linking AdaptixC2 to CountLoader, a malware loader first identified in August 2025.

How this analysis works

Attack Flow

Continue Reading

MSHTA Utility Exploited in Ongoing Malware Campaigns Critical FatFs Vulnerabilities Enable Physical Access Attacks on Millions of Devices DOUBLECUP Service Delivers Malware via Cached PNG Images CountLoader Malware Campaign Delivers Crypto Clipper via JavaScript and PowerShell AdaptixC2 Framework Misused in Ransomware Operations

AdaptixC2 Misused in Ransomware Operations Worldwide

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading