Do Son Attackers are using a fake MAS domain (get.activate.win) to deploy Cosmali Loader and XWorm RAT via PowerShell. Verify your command before running it!
XWorm RAT
A new campaign is using fake AI-themed content to trick users into downloading a malicious ScreenConnect installer that secretly delivers the XWorm Remote Access Trojan.
Beware of the XWorm Remote Access Trojan (RAT) builder attack. Discover how threat actors are targeting inexperienced cybersecurity enthusiasts with this malicious software.
Learn about a critical vulnerability in Secure Email Gateways and Antivirus scanners. Find out how to protect your organization from malicious VHD files.
UAC-0184, leverages sophisticated techniques like DLL sideloading and the use of Python-related files to deliver the notorious XWorm RAT
AutoSmuggle represents a pivotal development in the malware delivery arena. By embedding executable or archive files within SVG or HTML files