Frequency
4
occurrences
First Seen
February 17, 2026
Last Seen
July 21, 2026
Related Threat Clusters
-
Microsoft Issues Emergency Patches for Critical ASP.NET Core Vulnerability
On April 21, 2026, Microsoft released an emergency out-of-band update, .NET 10.0.7, to address a critical privilege escalation vulnerability tracked as CVE-2026-40372. This flaw, found in the ASP.NET Core Data…
16 articles · Updated April 22, 2026 -
AgentBaiting Campaign Exploits AI Skills to Distribute SmartLoader Malware
The AgentBaiting campaign has emerged as a significant threat, utilizing 800 fake AI Skills and Model Context Protocol (MCP) servers to deliver SmartLoader malware. This operation leverages trusted GitHub projects and…
3 articles · Updated July 21, 2026 -
SmartLoader Campaign Uses Fake Oura MCP Server to Distribute StealC Malware
Hackers exploited a cloned Oura MCP server to distribute the StealC info-stealer malware. The attack was uncovered by Straiker’s AI Research (STAR) Labs, revealing that the fake project was designed to appear…
2 articles · Updated February 17, 2026
Recent Intelligence Reports
- AgentBaiting Campaign Uses 800 Fake AI Skills and MCP Servers to Deliver SmartLoader Malware — Cybersecuritynews · July 21, 2026
- AgentBaiting Uses Fake AI Skills and MCP Servers to Deliver SmartLoader and StealC Malware — Gbhackers · July 21, 2026
- Microsoft Issues Emergency .NET 10.0.7 Update to Patch Elevation of Privilege Vulnerability — Gbhackers · April 22, 2026
- SmartLoader hackers clone Oura MCP project to spread StealC malware — Securityaffairs.Co · February 17, 2026