Starland RAT Hides in Fake Zoom and WebEx Installers
Starland RAT hides in trojanized Zoom, WebEx, and other Windows installers. Check…
LabubaRAT Malware: Check and Remove the Fake NVIDIA RAT
LabubaRAT malware hides as nvidia-sysruntime.exe. Verify its signature and hash, remove autorun,…
MODBEACON RAT: Removal, Persistence, and Fake Installer Checks
MODBEACON RAT hides behind counterfeit installers and can persist through WMI, tasks,…
Glitch SPY RAT Android Removal and Account Recovery Guide
Glitch SPY is an Android RAT spread through a fake rental-app APK.…
Fake Software Downloads Push ScreenConnect and AsyncRAT
Fake software download sites can bundle ScreenConnect and AsyncRAT. Check downloaded archives,…
Windows Security Certificate Expired/Invalid Pop-Up Scam: XWorm RAT Warning
Seeing a Windows Security Certificate Expired/Invalid page? It is a fake certificate…
Millenium RAT v4 Hits 62K Devices via Telegram C2
Group-IB says Millenium RAT v4 infected more than 62,000 Windows devices through…
ScreenConnect Client Scam: Remove Unexpected Remote Access
Found ScreenConnect Client or ConnectWise Control after a call, email, or fake…
Social Security Statement Email Scam Uses ScreenConnect
A June 2026 fake Social Security Statement email used a t.co link,…
Tiflux RMM Malware: Unauthorized Remote Access Cleanup
Unexpected Tiflux RMM after a service-agreement email can mean unauthorized remote access.…
Potemkin Loader Turns ClickFix Into 11-Host Intrusion
A ClickFix command dropped Potemkin Loader, RMMProject and EtherRAT across 11+ hosts.…
Argamal RAT in Game Archives
Kaspersky found Argamal RAT hidden in trojanized adult-game downloads. Check ZIP archives,…