VLC and VMware binaries side-load malware targeting Brazil and Portugal
WatchGuard linked the activity to Overlord RAT, Lampion, and a Pascal remote-access payload, without one shared operator.
62
Malware
Lampion
- Mentions · 7d2
- Mentions · 30d2
- All mentions2
- First seenOct 26, 2026
- Last mentioned4d ago
Timeline
2 articles · newest firstOverlord and Lampion campaigns hide malware with Windows tools
Phishing in Brazil and Portugal delivers VBScript downloaders that persist as fake Windows Error Reporting tasks and side-loaded DLLs.
58
Appears with
- Donutmalware · 2
- WatchGuardorganization · 2
- Overlord RATmalware · 2
- Bitsightorganization · 1
- VMware network installation utilityproduct · 1
- VMwarevendor · 1
- VideoLANvendor · 1
- VLC Media Playerproduct · 1
- Microsoftvendor · 1
- Acronisorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.