TryCloudflare

Platform

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

January 15, 2026

Last Seen

July 3, 2026

API

TryCloudflare refers to a threat-actor tactic that abuses Cloudflare services to hide malicious activity, leveraging Cloudflare's edge network to obfuscate command-and-control or payload delivery.

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (3)

Phishing Campaign Distributes AsyncRAT, VenomRAT, and XWorm via Fake Invoice PDF

Jul 2·2 sources

AsyncRAT Malware Campaign Exploits Trusted Services for Stealthy Attacks

Jul 2·2 sources

AsyncRAT Deployment via Phishing and Cloudflare Exploitation

Jan 14·3 sources

Related Entities

Phishing Malware Trojan AsyncRAT Campaign Cloudflare AsyncRAT XWorm Asyncrat Reloaded VenomRAT T1041 - Exfiltration Over C2 Channel T1059.001 - PowerShell T1059.006 - Python

TryCloudflare

Overview

Recent Events

Profile

Malware

Tools

Attack Types

Relationships

Related Clusters (3)

Phishing Campaign Distributes AsyncRAT, VenomRAT, and XWorm via Fake Invoice PDF

AsyncRAT Malware Campaign Exploits Trusted Services for Stealthy Attacks

AsyncRAT Deployment via Phishing and Cloudflare Exploitation

Related Articles (4)

Asyncrat Reloaded Python Trycloudflare Malware

AsyncRAT Campaign Abuses TryCloudflare Tunnels and Python Scripts for Malware Delivery

Phishing Campaign Uses Fake Invoice PDF to Drop AsyncRAT, VenomRAT, and XWorm

AsyncRAT campaign exploits Cloudflare services to hide attacks

Related Entities