Evalusion Campaign is a threat campaign tracked across 2 threat clusters and 1 intelligence report mention on ThreatCluster. First observed November 17, 2025; most recent activity November 17, 2025.
The Evalusion Campaign is a threat operation that leverages the ClickFix delivery technique to compromise targets. It deploys a two-stage payload comprising Amatera Stealer (data/credential theft) and NetSupport RAT (remote access trojan), enabling both information exfiltration and remote control. This multi-tool approach increases stealth, impact, and persistence within infected environments.
The EVALUSION and SmartApeSG campaigns are utilizing the ClickFix technique to deploy the Amatera Stealer and NetSupport Remote Access Trojan (RAT). These campaigns target various organizations, exploiting…
The EVALUSION and SmartApeSG campaigns utilize the ClickFix technique to deploy the Amatera Stealer and NetSupport RAT. These campaigns target various organizations, leveraging vulnerabilities to execute malicious…