Operation DupeHike — Campaign Analysis & Threat Activity

Overview

Operation DupeHike is a threat campaign that leverages the DuperRunner malware family to compromise organizations by targeting employees with weaponized documents. It highlights phishing-based intrusion techniques, where malicious documents are used to deliver malware and gain initial access, marking it as a notable active campaign in 2025.

Related Threat Clusters

• Amnesia RAT and Ransomware Target Russian Users in Phishing Campaign

  A multi-stage phishing campaign is targeting Russian organizations with Amnesia RAT and Hakuna Matata ransomware. The attackers use social engineering tactics to deliver malicious files disguised as business documents,…

  2 articles · Updated January 26, 2026
• Operation DupeHike: DuperRunner Malware Targets Russian Corporate Employees

  Operation DupeHike is a sophisticated cyber attack campaign targeting employees in Russian corporate environments, particularly in human resources, payroll, and administrative departments. The campaign, attributed to…

  2 articles · Updated December 4, 2025

Recent Intelligence Reports

• Sophisticated Multi-Stage Phishing Attack Exploits Microsoft Windows in Russian ... — Rescana · January 25, 2026
• Operation DupeHike: DuperRunner Malware Attack on Employees — Gbhackers · December 4, 2025
• Operation DupeHike Attacking Employees Using Weaponized Documents DUPERUNNER Malware — Cybersecuritynews · December 4, 2025

Related Entities