Related Threat Clusters
-
Microsoft's Record Patch Tuesday in June 2026 Addresses 206 Vulnerabilities
In June 2026, Microsoft released its largest Patch Tuesday update, addressing 206 vulnerabilities, including critical flaws in Windows kernel and BitLocker. Notable CVEs include a zero-day in Visual Studio Code that…
229 articles · Updated July 1, 2026 -
DragonForce Ransomware Exploits Microsoft Teams for Covert C2 Communications
The DragonForce ransomware group has been observed using a custom malware, Backdoor.Turn, to conceal command-and-control (C&C) traffic within Microsoft Teams' relay infrastructure. This sophisticated technique allows…
13 articles · Updated June 16, 2026 -
Powercat Malware Campaign Targets Gamers with Infostealer Disguised as Cheats
A malware campaign named Powercat is delivering a sophisticated infostealer disguised as cheat software for popular games like Roblox and Minecraft. The campaign primarily targets users on gaming and social platforms,…
8 articles · Updated August 3, 2026 -
DesckVB RAT Campaign Exploits Google DoubleClick for Malspam Delivery
In May 2026, a malspam campaign utilizing the Google DoubleClick domain was identified, delivering the DesckVB remote access trojan (RAT). The attack begins with an HTML email attachment that redirects users through…
6 articles · Updated June 3, 2026 -
Hackers Exploit QEMU VMs to Evade Detection and Deploy Ransomware
Hackers are utilizing QEMU, an open-source virtual machine emulator, to create hidden Linux environments within Windows systems, effectively evading endpoint security tools. This method allows for long-term access,…
8 articles · Updated April 17, 2026 -
PavinLoader Malware Exploits ClickFix and Fake Downloads to Deploy Amatera Stealer
PavinLoader, a multi-stage .NET malware loader, is being utilized in ClickFix and fake software download campaigns to deploy the Amatera Stealer. Victims are lured through deceptive pages, such as fake Cloudflare…
2 articles · Updated August 25, 2026 -
Grandoreiro Banking Trojan Resurfaces in Mexico with DLL Sideloading Tactics
The Grandoreiro banking trojan has re-emerged in a new campaign targeting users in Mexico, which accounted for 40% of observed detections. This malware, originating from Brazil, employs DLL sideloading techniques using…
5 articles · Updated August 19, 2026 -
Parrot OS 7.0 Released with Major Overhaul and New AI Tools
Parrot OS 7.0, codenamed Echo, has been officially released, featuring a complete system rewrite based on Debian 13. This version introduces KDE Plasma 6, Wayland by default, and an expanded suite of penetration testing…
2 articles · Updated December 27, 2025 -
Critical Buffer Overflow Vulnerability in FreeRDP Clients
Fedora has issued advisories regarding critical buffer overflow vulnerabilities in the xfreerdp and wlfreerdp Remote Desktop Protocol clients from the FreeRDP project. Users connecting to RDP servers, including…
4 articles · Updated January 21, 2026 -
ClickFix Attack Wave Targets Windows Users with StealC Malware
A new social engineering campaign named ClickFix is targeting Windows users by presenting fake CAPTCHA verification pages. Victims are led to compromised websites that display fraudulent Cloudflare security checks,…
230 articles · Updated February 13, 2026
Recent Intelligence Reports
- PavinLoader Malware Spreads via ClickFix and Fake Download Campaigns — Technadu · August 25, 2026
- Grandoreiro goes north: From Brazil to Mexico with a new DLL sideloading campaign — Acronis · August 19, 2026
- Oracle patch day: Updates for less than a thousand vulnerabilities — Heise.De · August 19, 2026
- Powercat Malware Campaign Fake Game Cheats Deliver Infostealer Targeting Discord Roblox And Crypto Wallets — www.threatlocker.com · August 6, 2026
- June 16 blog post — www.security.com · June 17, 2026
- Ransomware gang abuses Microsoft Teams relays to hide malicious traffic — Bleepingcomputer · June 16, 2026
- DragonForce Attackers Weaponize Microsoft Teams Relays to Stay Hidden — Security · June 16, 2026
- Inside DesckVB Rat Analysis: From Malspam to In-Memory RAT — Huntress · June 3, 2026