Hugging Face crypto-mining models return; a copy stays live
Pluto found 31 repositories posing as Qwen2 checkpoints; the flagship reached 28,412 downloads and a copy remained online.
74
Product
NetSupport Manager
- Mentions · 7d1
- Mentions · 30d1
- All mentions6
- First seenAug 17, 2026
- Last mentioned1d ago
Timeline
6 articles · newest firstGoogle Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware
Huntress analysts trace one X direct message into separate Mac and Windows malware chains delivering AMOS infostealer and NetSupport Manager RAT.
50
We've got one word for it, and it's usually the wrong one
Cisco Talos's Threat Source newsletter critiques 'burnout' terminology, describing four occupational injuries, and flags a UAT-10820 WebDAV stealer campaign at a Ukrainian government organization.
32
Hackers Abuse Google CAPTCHA, WebDAV and BNB Smart Chain to Deploy Credential-Stealing Malware
Cisco Talos details ClickFix campaigns abusing fake Google CAPTCHA prompts, WebDAV and BNB Smart Chain to deploy the Amatera infostealer.
55
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
Cisco Talos details ClearFake WebDAV chains delivering Amatera stealer to a Ukrainian government organization, with cryptocurrency and credential theft payloads.
55
Cortex XDR™ Detects New Phishing Campaign Installing NetSupport Manager RAT
Cortex XDR threat hunters uncovered a phishing campaign delivering the NetSupport Manager RAT via a fake password-protected NortonLifelock Word document.
42
Appears with
- UAT-10820threat actor · 3
- ZigCryptoStealermalware · 3
- Ukrainian government organizationvictim · 3
- Cisco Talosvendor · 3
- Amateramalware · 2
- Amateraproduct · 2
- ZigCryptoStealerproduct · 2
- htt0118/qwen2-tinyai model · 1
- Hugging Faceorganization · 1
- Palo Alto Networksvendor · 1
- BNB Smart Chainorganization · 1
- ServiceNowvendor · 1
- NetSupport Manager RATmalware · 1
- Xinferenceproduct · 1
- Microsoft Defenderproduct · 1
- Huntressvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.