Rust-based CikaBika Bot uses Discord as its command center
A Nim loader and PowerShell UAC bypass try to plant the payload as Edge’s dbghelp.dll.
56
Organization
Darktrace
- Mentions · 7d0
- Mentions · 30d3
- All mentions4
- First seenAug 20, 2026
- Last mentioned12d ago
Timeline
4 articles · newest firstThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Qilin and Settra are exploiting PAN-OS GlobalProtect flaw CVE-2026-0257, alongside new RATs and a DNS wallet drainer.
86
CikaBika Bot RAT Uses Discord for C&C
Darktrace reports CikaBika, a Rust RAT using Discord for C2, delivered by phishing PDFs and LNK loaders.
58
Fake Gemini installer delivers Vidar infostealer via Google Colab lure
Attackers used a fake Google Gemini installer hosted on Google Colab to deliver a Go-compiled Vidar infostealer that stole browser credentials from an EMEA company.
45
Related CVEs
by mentions- CVE-2026-025795%7.8Authentication Bypass in Palo Alto Networks PAN-OS GlobalProtect Portal and Gateway
Appears with
- CikaBika Botmalware · 3
- Microsoft Edgeproduct · 2
- Discordproduct · 2
- Googlevendor · 2
- Ngrokproduct · 2
- Noirmalware · 1
- KGB RATmalware · 1
- ReliaQuestorganization · 1
- Qilinthreat actor · 1
- Google Messagesproduct · 1
- Windowsproduct · 1
- Prisma Accessproduct · 1
- PAN-OSproduct · 1
- Google Geminiproduct · 1
- Recorded Futureorganization · 1
- Point Wildorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.