Skip to content
Spearphishing Campaign Exploits Windows Screensaver for Remote Access Tools

Spearphishing Campaign Exploits Windows Screensaver for Remote Access Tools

First seen 6 Feb 2026, 10:26 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster March 12, 2026 at 13:27 UTC

A spearphishing campaign is leveraging Windows screensaver files to infiltrate corporate networks and deploy remote management tools. This method targets users unfamiliar with the screensaver file format, allowing attackers to gain unauthorized remote access. Organizations using Windows systems are particularly vulnerable to this exploit.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 194d ago How this analysis works

More articles in this cluster (7)

Following this threat?

Track GodRAT in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed