Matanbuchus 3.0 Launches AstarionRAT via ClickFix and Silent MSI Installations

Matanbuchus 3.0 Launches AstarionRAT via ClickFix and Silent MSI Installations

First seen 18 Feb 2026, 04:12 UTC GbhackersCybersecuritynewsCyberpress 76% similarity 31.3

Article Content

Browse articles
ThreatCluster

Matanbuchus 3.0, a Malware-as-a-Service loader, has re-emerged in February 2026 after nearly a year of inactivity. This version introduces ClickFix social engineering tactics and silent MSI installations to deploy AstarionRAT, with a subscription fee now reaching up to $15,000 per month, indicating a shift towards high-value targets.

ThreatCluster AI How this analysis works

Timeline

2026-02-17
GBHackers reports on Matanbuchus 3.0 release
2026-02-18
Cybersecuritynews publishes details on Matanbuchus 3.0

Community

Browse all →

Tracked Entities in This Story