Netskope

Python NodeStealer Adds Keylogging and Screen Capture Spyware

• Malware

Python NodeStealer Adds Keylogging and Screen Capture Spyware

Do Son September 8, 2026 0

Python NodeStealer now adds keylogging, clipboard, and screenshot spyware plus dual Telegram C2. See how the NodeStealer spyware upgrade works.

Fake AI Tools Malware Targets Developers Through GitHub

• Malware

Fake AI Tools Malware Targets Developers Through GitHub

Do Son August 11, 2026 0

Fake AI tools malware targets developers in a GitHub infostealer campaign using SmartLoader and blockchain C2. See how it works.

ClickFix 2026: New AppleScript Malware Held macOS Users Hostage for Passwords

• Malware

ClickFix 2026: New AppleScript Malware Held macOS Users Hostage for Passwords

Do Son April 23, 2026 0

Netskope uncovers a ClickFix macOS campaign that holds the UI hostage to steal system passwords, Keychains, and 200+ browser extensions.

New ClickFix Campaign Unveiled: Modular NodeJS Malware Targets Windows Users

• Malware

New ClickFix Campaign Unveiled: Modular NodeJS Malware Targets Windows Users

Do Son April 10, 2026 0

Netskope uncovers a Node.js-based ClickFix campaign using gRPC over Tor for stealthy crypto theft. A leaked file exposed their entire MaaS backend.

Inside the AI-Driven “Lure Factory” Flooding GitHub with Trojans

• Malware

Inside the AI-Driven “Lure Factory” Flooding GitHub with Trojans

Do Son March 29, 2026 0

Netskope uncovers TroyDen’s Lure Factory, an AI-powered operation using 300+ trojanized GitHub repos and a 29,000-year sleep to steal credentials.

Silver Fox Strikes with Fake Installers: Sainbox RAT and Hidden Rootkit Target Chinese Speakers

• Malware

Silver Fox Strikes with Fake Installers: Sainbox RAT and Hidden Rootkit Target Chinese Speakers

Do Son June 28, 2025 0

Netskope uncovers Sainbox RAT (Gh0stRAT variant) and Hidden rootkit delivered via fake software installers to Chinese users, leveraging DLL sideloading and sRDI for stealth.

Glitch Platform Abused: Phishing Campaigns Circumvent MFA and Target Credit Unions

• Cybercriminals

Glitch Platform Abused: Phishing Campaigns Circumvent MFA and Target Credit Unions

Do Son June 3, 2025 0

Netskope reveals a surge in phishing on Glitch, abusing the platform to bypass MFA and steal credentials, mainly targeting Navy Federal Credit Union members.

DOGE Big Balls Ransomware: New Tools and Tactics Uncovered

• Malware

DOGE Big Balls Ransomware: New Tools and Tactics Uncovered

Do Son May 9, 2025 0

Netskope Labs details a complex infection chain used by the DOGE Big Balls Ransomware, involving PowerShell scripts, exploits, and lateral movement tactics.