Thehackernews

EVALUSION and SmartApeSG Campaigns Deploy Amatera Stealer and NetSupport RAT via ClickFix

First seen 2 Dec 2025, 18:33 UTC • Gbhackers

•23.4

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The EVALUSION and SmartApeSG campaigns utilize the ClickFix technique to deploy the Amatera Stealer and NetSupport RAT. These campaigns target various organizations, leveraging vulnerabilities to execute malicious payloads. The incidents highlight ongoing threats in the cybersecurity landscape.

How this analysis works

Attack Flow

9 entities, 12 inferred relationships (STIX 2.1).

Technique (3)

Data Breach
Malware
ClickFix Technique

Campaign (3)

ClickFix campaign
Evalusion Campaign
SmartApeSG Campaign

Malware (3)

Amatera Stealer
NetSupport RAT
ClickFix

Relationships

ClickFix campaign uses Amatera Stealer
ClickFix campaign uses NetSupport RAT
ClickFix campaign uses ClickFix
Evalusion Campaign uses Amatera Stealer
Evalusion Campaign uses NetSupport RAT
Evalusion Campaign uses ClickFix
SmartApeSG Campaign uses Amatera Stealer
SmartApeSG Campaign uses NetSupport RAT
SmartApeSG Campaign uses ClickFix
ClickFix campaign related to Data Breach
ClickFix campaign related to Malware
ClickFix campaign related to ClickFix Technique

Continue Reading

Slovakia Discovers Russian Backdoor in Traffic Speed Cameras ClearFake Campaigns Utilize WordlistLoader to Distribute Amatera Infostealer Infostealer Malware Hijacks Claude Sessions, Drains User Accounts ACR Stealer Campaigns Exploit ClickFix and Steganography to Target Enterprises InstallFix Campaign Exploits AI Trust to Deliver Malware via Fake Install Pages New ACRStealer Variant Enhances Evasion Techniques and Threat Level

EVALUSION and SmartApeSG Campaigns Deploy Amatera Stealer and NetSupport RAT via ClickFix

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading