Cybersecuritynews Matanbuchus 3.0 Launches AstarionRAT via ClickFix and Silent MSI Installations
Article Content
Browse articles 
Matanbuchus 3.0, a Malware-as-a-Service loader, has re-emerged in February 2026 after nearly a year of inactivity. This version introduces ClickFix social engineering tactics and silent MSI installations to deploy AstarionRAT, with a subscription fee now reaching up to $15,000 per month, indicating a shift towards high-value targets.
Ask AI about this cluster
Answers cite the sources they use
Updated 246d ago How this analysis works
Timeline
2026-02-17
GBHackers reports on Matanbuchus 3.0 release
2026-02-18
Cybersecuritynews publishes details on Matanbuchus 3.0
More articles in this cluster (3)
Following this threat?
Track ClickFix in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Active Exploitation of Siemens Software Center Vulnerability in ClickFix Campaign Siemens has confirmed that a DLL side-loading vulnerability (CVE-2026-110936) in Siemens Software Center is actively being exploited in malware attacks. The vulnerability allows attackers to execute malicious code by placing a specially crafted DLL in a directory searched by the application. Siemens first disclosed… 
ClickFix Technique Surges with AI Lures in Cyber Attacks ClickFix has emerged as a dominant cyber attack technique since 2024, now accounting for over 52% of Push's detections. This method has evolved to include sub-techniques like InstallFix and ConsentFix, with attackers increasingly using AI tools as bait. In Q2 2026, ClickFix detections reached 67%, surpassing other…