PureHVNC Archives • Daily CyberSecurity

Google Forms Weaponized: New “PureHVNC” Campaign Targets Professionals via LinkedIn

Google Forms Weaponized: New “PureHVNC” Campaign Targets Professionals via LinkedIn

Do Son March 27, 2026

Malwarebytes uncovers a PureHVNC RAT campaign using Google Forms to bait professionals. Learn how this stealthy infection chain targets 2026 business docs.

Stealthy Dual Malware Loader Uncovered: Executes TorNet & PureHVNC Simultaneously, Cloaked by MurmurHash2 axios Supply Chain Attack WAVESHAPER.V2 SnappyBee Malware Salt Typhoon Stately Taurus ScoringMathTea RAT, Lazarus Reflective DLL

axios Supply Chain Attack WAVESHAPER.V2 SnappyBee Malware Salt Typhoon Stately Taurus ScoringMathTea RAT, Lazarus Reflective DLL

Stealthy Dual Malware Loader Uncovered: Executes TorNet & PureHVNC Simultaneously, Cloaked by MurmurHash2

Do Son October 30, 2025

IIJ exposed a novel loader that simultaneously deploys TorNet (TOR C2) and PureHVNC (RAT) via DLL sideloading. It uses MurmurHash2 for API hashing and injects into jsc.exe for stealth.

PureHVNC RAT: Inside the HVNC Malware and the PureCoder Ecosystem Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT

Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT

PureHVNC RAT: Inside the HVNC Malware and the PureCoder Ecosystem

Do Son September 17, 2025

A new report uncovers the Pure malware family and its developer, PureCoder, highlighting an eight-day intrusion using the sophisticated PureHVNC RAT.

Acronis TRU Uncovers Surge in ScreenConnect Abuse with Dual-RAT Deployment Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT

Acronis TRU Uncovers Surge in ScreenConnect Abuse with Dual-RAT Deployment

Do Son September 5, 2025

A new campaign is abusing the legitimate RMM tool ScreenConnect to deliver RATs like AsyncRAT and PureHVNC, a trend that is on the rise, targeting US organizations.

ViperSoftX Resurfaces: Stealthy Crypto-Stealing Malware Hits Global Users! ViperSoftX, Crypto Malware

ViperSoftX Resurfaces: Stealthy Crypto-Stealing Malware Hits Global Users!

Do Son June 6, 2025

ViperSoftX, a stealthy malware, is actively spreading via fake software to steal cryptocurrency and enable remote control, affecting users globally.

PureHVNC RAT Spreads Through Fake Job Offers and Multi-Stage Obfuscation PureHVNC RAT Job scam malware

PureHVNC RAT Spreads Through Fake Job Offers and Multi-Stage Obfuscation

Do Son May 30, 2025

A new global malware campaign delivers PureHVNC RAT via fake job offers and complex, multi-stage obfuscation, making detection extremely difficult.

New Phishing Campaign Deploys PureHVNC and Other Malware, Targets Sensitive Data

Do Son August 12, 2024

Get insights into a highly malicious phishing campaign that uses cleverly crafted emails and HTML attachments to deploy PureHVNC