Joyfill npm Packages Compromised: Six Malicious Versions
Six prerelease versions of @joyfill/components and @joyfill/layouts carried an import-time RAT and…
Night Dragon RAT Android Removal: Flying Eagle Cleanup
Remove Night Dragon or Flying Eagle RAT from Android, revoke risky permissions,…
TONResolver RAT Removal: Fake Booking.com Photo Trap
Learn how TONResolver reaches hotel PCs through fake guest-complaint photos, how to…
Operation BlueDash Uses Fake Teams Updates for Remote Access
Operation BlueDash turns a secure-document email into a fake Teams update that…
MedusaHVNC Hijacks Browser Sessions on a Hidden Desktop
BlackFog analyzed MedusaHVNC, a Windows RAT that opens a browser on an…
MarkiRAT Malware Removal: Fake VPNs and svehost.exe
MarkiRAT hides in fake VPN and media-player installers. Check svehost.exe, BITS jobs,…
msaRAT Hides C2 Traffic Inside Chrome and Edge
Cisco Talos found a Rust backdoor that starts a hidden Chrome or…
Starland RAT Hides in Fake Zoom and WebEx Installers
Starland RAT hides in trojanized Zoom, WebEx, and other Windows installers. Check…
LabubaRAT Malware: Check and Remove the Fake NVIDIA RAT
LabubaRAT malware hides as nvidia-sysruntime.exe. Verify its signature and hash, remove autorun,…
MODBEACON RAT: Removal, Persistence, and Fake Installer Checks
MODBEACON RAT hides behind counterfeit installers and can persist through WMI, tasks,…
Glitch SPY RAT Android Removal and Account Recovery Guide
Glitch SPY is an Android RAT spread through a fake rental-app APK.…
Fake Software Downloads Push ScreenConnect and AsyncRAT
Fake software download sites can bundle ScreenConnect and AsyncRAT. Check downloaded archives,…