Related Threat Clusters
-
Widespread Abuse of ScreenConnect to Deploy AsyncRAT via Fake Installers
A significant cybersecurity campaign has emerged, exploiting the legitimate remote access tool ScreenConnect to deploy AsyncRAT malware. Attackers utilized spoofed websites and typosquatted domains, masquerading as…
7 articles · Updated July 1, 2026 -
ModHeader Extension Removed for Covert Data Collection
The ModHeader browser extension, used by approximately 1.6 million users across Chrome and Edge, was removed after researchers discovered a dormant data-collection capability embedded in its signed release. The…
8 articles · Updated July 14, 2026 -
Emerging Threat: REVSTEALER Infostealer Targets Credentials and Gaming Accounts
REVSTEALER is an emerging infostealer identified by Elastic Security Labs, targeting browsers, wallets, and gaming accounts. It has gained traction since February 2026, with over 4,700 samples reported on VirusTotal.…
2 articles · Updated September 6, 2026 -
Ransomware Fuels Surge in Global Cyberattacks
As of February 12, 2026, organizations worldwide are experiencing an average of 2,090 cyber-attacks per week, largely driven by ransomware incidents. This increase highlights the ongoing challenges faced by businesses…
1922 articles · Updated February 12, 2026 -
AsyncRAT Deployment via Phishing and Cloudflare Exploitation
Threat actors have leveraged phishing emails to initiate a multi-stage intrusion chain that deploys the AsyncRAT remote access trojan. This operation utilizes Cloudflare's free-tier infrastructure and legitimate Python…
3 articles · Updated January 14, 2026
Recent Intelligence Reports
- Four REVSTEALER — Thehackernews · September 6, 2026
- New Spirals Ransomware Deployed Across South Asian IT Firm in Under 24 Hours — www.security.com · July 19, 2026
- 012 — attack.mitre.org · July 1, 2026
- AsyncRAT Phishing Chain Abuses WebDAV and Cloudflare — Socprime · January 14, 2026