Kothamine malware uses Tailscale’s tailcat to evade network detection
Malwarebytes details Kothamine, a Windows RAT spread via npm that tunnels commands through Tailscale tailcat.
67
Malware
Kothamine
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 25, 2026
- Last mentionedSep 25, 2026
Timeline
1 articles · newest firstAppears with
- Kothamine Agentmalware · 1
- Tailscaleproduct · 1
- Tailscalevendor · 1
- Malwarebytesorganization · 1
- GitHuborganization · 1
- tailcatproduct · 1
- Windowsproduct · 1
- Windows Defenderproduct · 1
- npmproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.