Skip to content
AsyncRAT Malware Campaign Exploits Trusted Services for Stealthy Attacks

AsyncRAT Malware Campaign Exploits Trusted Services for Stealthy Attacks

First seen 2 Jul 2026, 18:59 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •July 3, 2026 at 18:59 UTC
  • •AsyncRAT malware leverages TryCloudflare tunnels and Dropbox for stealthy delivery.
  • •The campaign targets organizations by exploiting trusted services to evade detection.
  • •Security professionals are advised to strengthen defenses against this ongoing threat.

The AsyncRAT malware has resurfaced, utilizing TryCloudflare tunnels and Dropbox links for delivery, which allows it to bypass traditional security measures. This campaign targets various organizations, enabling attackers to maintain control over infected systems, exfiltrate data, and execute commands without detection. The use of these trusted services complicates defensive efforts, as they are rarely blocked by security tools. The current status of the campaign indicates ongoing exploitation, with security professionals urged to enhance their defenses against this sophisticated threat. Specific details on the scale of the impact and the number of affected systems remain unclear.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 104d ago How this analysis works

Timeline

2026-07-02
AsyncRAT campaign reported
The campaign exploits TryCloudflare tunnels and Dropbox links for malware delivery, increasing its stealth against security measures.
Cybersecuritynews
2026-07-02
AsyncRAT malware analysis published
Forcepoint's analysis highlights AsyncRAT's capabilities in remote access and data exfiltration, emphasizing its threat level.
Forcepoint

More articles in this cluster (2)

Following this threat?

Track AsyncRAT in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed