T1059.007 - Windows Script Host - MITRE ATT&CK

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

January 12, 2026

Last Seen

January 12, 2026

Related Threat Clusters

AsyncRAT Deployment via Phishing and Cloudflare Exploitation
Threat actors have leveraged phishing emails to initiate a multi-stage intrusion chain that deploys the AsyncRAT remote access trojan. This operation utilizes Cloudflare's free-tier infrastructure and legitimate Python…

3 articles · Updated January 14, 2026

Recent Intelligence Reports

Analyzing a Multi — Feeds.Trendmicro · January 12, 2026

Related Entities

Malware Phishing AsyncRAT Campaign Cloudflare AsyncRAT T1055 - Process Injection T1059.001 - PowerShell T1218.011 - Rundll32 T1547.001 - Startup Folder T1566.002 - Spearphishing Link Microsoft Edge WebDAV