Amnesia RAT and Ransomware Target Russian Users in Phishing Campaign

Amnesia RAT and Ransomware Target Russian Users in Phishing Campaign

First seen 27 Jan 2026, 01:44 UTC •RescanaScworld •86% similarity •48.8

Article Content

Browse articles
ThreatCluster

A multi-stage phishing campaign is targeting Russian organizations with Amnesia RAT and Hakuna Matata ransomware. The attackers use social engineering tactics to deliver malicious files disguised as business documents, exploiting Microsoft Windows features for infection. The campaign employs a complex infection chain that includes a PowerShell script for persistence.

ThreatCluster AI

Extracted Entities

1 / 2

Community

Browse all →

Tracked Entities in This Story

Hakuna Matata Amnesia RAT WinLocker Operation DupeHike Paper Werewolf/GOFFEE GitHub GoFile Telegram Windows Malware Phishing Ransomware PowerShell Dropbox Defendnot