ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
Blackpoint details new ChainScript RAT spread via ClickFix lures that uses a Polygon smart contract to rotate C2 infrastructure.
65
Malware
Amatera Stealer
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenAug 25, 2026
- Last mentionedSep 21, 2026
Timeline
4 articles · newest firstWe've got one word for it, and it's usually the wrong one
Cisco Talos's Threat Source newsletter critiques 'burnout' terminology, describing four occupational injuries, and flags a UAT-10820 WebDAV stealer campaign at a Ukrainian government organization.
32
WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords
Gen Digital details WordlistLoader delivering Amatera Stealer via ClickFix and EtherHiding, while SynkLoader phishes Windows credentials through Microsoft Teams.
55
E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands
Researchers identified two new RATs, E4del and PINHOLE, using FTP banners as dead drop resolvers to fetch C2 commands via ClickFix-style lures.
55
Appears with
- Microsoftvendor · 3
- Microsoft Teamsproduct · 2
- WordlistLoadermalware · 2
- HBO Maxvictim · 1
- ACR Stealermalware · 1
- Expelvendor · 1
- Cisco Talosvendor · 1
- HBO Maxproduct · 1
- ZigCryptoStealerproduct · 1
- Blackpointvendor · 1
- Microsoft Defenderproduct · 1
- ZigCryptoStealermalware · 1
- NetSupport Managerproduct · 1
- ServiceNowvendor · 1
- Gen Digitalvendor · 1
- Spotifyproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.