Frequency
3
occurrences
First Seen
July 16, 2026
Last Seen
July 21, 2026
Related Threat Clusters
-
Cruciferra Crypter Service Powers Multiple Cybercrime Campaigns
Proofpoint has identified a sophisticated crypter service named Cruciferra, first sold in autumn 2025, that is utilized by various cybercriminal groups to cloak malware. The service employs advanced techniques such as…
8 articles · Updated July 20, 2026 -
Global Phishing Campaign Uses Lua Loader Disguised as TrueType Font Files
Since late March 2026, a large-scale phishing campaign has been observed utilizing disguised TrueType Font (.ttf) files to deliver Lua-based loaders and various malware, including Agent Tesla and Remcos. The attackers…
5 articles · Updated July 16, 2026
Recent Intelligence Reports
- The Ttf Trap A Global Campaign Of A Low Detection Lua Loader — www.fortinet.com · July 21, 2026
- Cruciferra Crypter Uses Process Ghosting to Evade Detection — Infosecurity-Magazine · July 20, 2026
- Phishing Campaign Hides Lua Loader as TrueType Font File — Infosecurity-Magazine · July 16, 2026