ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
Blackpoint details new ChainScript RAT spread via ClickFix lures that uses a Polygon smart contract to rotate C2 infrastructure.
65
Vendor
Cato Networks
- Mentions · 7d0
- Mentions · 30d0
- All mentions6
- First seenAug 25, 2026
- Last mentionedSep 21, 2026
Timeline
6 articles · newest firstThe 12 Best Managed Firewall Services, Compared and Priced
GBHackers compares 12 managed firewall service providers, naming Fortinet best value and Secureworks best detection while flagging recent ownership changes.
12
ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions
Silver Fox distributes ValleyRAT via signed QN Wallpaper adware, sideloading a malicious libcef.dll into a trusted process to evade defenses.
62
Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploited
Help Net Security's weekly digest highlights 274 compromised Zimbra servers, Gitea and Citrix NetScaler KEV additions, a PaperCut zero-day, and a suspected Iran-linked power plant attack.
25
Silver Fox Targets Japanese Manufacturer with 3
Chinese group Silver Fox used new vulnerable drivers and DLL side-loading to deploy ValleyRAT at a Japanese industrial manufacturer.
58
Fake OpenAI Codex download tricks macOS users into installing malware
Cato Networks uncovered a malware campaign using sponsored search ads and fake OpenAI Codex pages to deliver an AMOS-like infostealer to macOS users.
55
Related CVEs
by mentions- CVE-2026-6000424%9.8Unauthenticated RCE in Gitea via diffpatch API Git Hook Injection
- CVE-2026-7357072%8.9Unauthenticated OS Command Injection RCE in Synacor Zimbra Collaboration Suite
- CVE-2026-84521%8.8Memory Buffer Overflow in Citrix NetScaler ADC/Gateway Exploited in the Wild
Appears with
- Silver Foxthreat actor · 2
- Kasperskyvendor · 2
- ValleyRATmalware · 2
- HBO Maxvictim · 1
- PaperCut MFproduct · 1
- Spotifyproduct · 1
- Zoom Workplaceproduct · 1
- HBO Maxproduct · 1
- Microsoft Defenderproduct · 1
- FBIorganization · 1
- Boston Scientificvictim · 1
- Atlas RATmalware · 1
- Cybereasonvendor · 1
- ValleyRATproduct · 1
- Zimbravendor · 1
- CISAorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.