Storm-1865 used ClickFix and Booking.com lures against hotels
Fake CAPTCHA pages pushed mshta commands that installed stealers and RATs; Booking.com says its own systems were not breached.
36
Malware
AsyncRAT
- Mentions · 7d1
- Mentions · 30d1
- All mentions4
- First seenSep 3, 2026
- Last mentioned4d ago
Timeline
4 articles · newest firstThe Top 4 Threats We Found by Investigating Every Alert for a Quarter
Prophet Security's quarterly threat report finds identity attacks made up roughly half of confirmed malicious activity, with stolen authenticated sessions bypassing conditional access controls.
52
Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware
Infoblox reports Sable Squirrel spent nearly $7 million on expired domains to redirect traffic to illegal sports streaming, gambling, and malware infrastructure.
55
H1 2026 Malware Vulnerability Trends
Recorded Future's H1 2026 report finds 215 actively exploited CVEs, RAT dominance, NFC payment fraud, and AI-augmented but not autonomous tradecraft.
78
Appears with
- Lumma Stealermalware · 2
- Microsoftvendor · 2
- XWormmalware · 2
- njRATmalware · 1
- ColaScoreproduct · 1
- PsExecproduct · 1
- Mozillavendor · 1
- DCRatproduct · 1
- DCRatmalware · 1
- Remcos RATproduct · 1
- Prophet Securityorganization · 1
- VenomRATmalware · 1
- Danabotmalware · 1
- Stealcmalware · 1
- Claude Mythosproduct · 1
- US Federal Trade Commissionorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.