ScreenConnect Client Scam: Remove Unexpected Remote Access
Found ScreenConnect Client or ConnectWise Control after a call, email, or fake…
Social Security Statement Email Scam Uses ScreenConnect
A June 2026 fake Social Security Statement email used a t.co link,…
Tiflux RMM Malware: Unauthorized Remote Access Cleanup
Unexpected Tiflux RMM after a service-agreement email can mean unauthorized remote access.…
Potemkin Loader Turns ClickFix Into 11-Host Intrusion
A ClickFix command dropped Potemkin Loader, RMMProject and EtherRAT across 11+ hosts.…
Argamal RAT in Game Archives
Kaspersky found Argamal RAT hidden in trojanized adult-game downloads. Check ZIP archives,…
DesckVB RAT Malspam
DesckVB RAT malspam abuses DoubleClick redirects before dropping a ZIP, script loader,…
nethost.dll ProtonVPN Cleanup
Found nethost.dll beside ProtonVPN.exe or a fake VPN folder? Learn how to…
Deno RAT Fake Downloads
Malwarebytes found fake GitHub and SourceForge downloads impersonating ChatGPT, Claude, AutoTune, and…
KongTuke Uses Microsoft Teams Help-Desk Lures to Drop ModeloRAT
KongTuke moved from web-based ClickFix lures into external Microsoft Teams chats, using…
Is JDownloader Safe?
JDownloader says attackers changed several official website download links on May 6-7,…
QLNX RAT Targets Linux Developer and Cloud Credentials
Trend Micro reports QLNX, a Linux-focused Quasar RAT variant that combines persistence,…