Search: “mshta.exe”

73 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 73 Threat actor 19 Vulnerability 15 Ransomware 13 Exploit / PoC 6 Phishing & fraud 5 Data breach 1 Industry 1

SeverityAll critical 19 high 67 medium 45 low 1 info 1

Cracked Software and YouTube Videos Spread CountLoader and GachiLoader Malware

The Hacker NewsDec 20, 13:28 UTC · Dec 20, 2025Malware

30

Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads

The Hacker NewsDec 12, 18:50 UTC · Dec 12, 2025Malware

30

JackFix Uses Fake Windows Update Pop-Ups on Adult Sites to Deliver Multiple Stealers

The Hacker NewsDec 2, 05:40 UTC · Dec 2, 2025Malware

55

ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files

The Hacker NewsJul 17, 08:56 UTC · Jul 17, 2026Malware1

30

Transparent Tribe Launches New RAT Attacks Against Indian Government and Academia

The Hacker NewsJan 6, 05:33 UTC · Jan 6, 2026Malware

42

Experts Confirm JS#SMUGGLER Uses Compromised Sites to Deploy NetSupport RAT

The Hacker NewsDec 10, 07:34 UTC · Dec 10, 2025Malware

30

Analysis of TAG-140 Campaign and DRAT V2 Development Targeting Indian Government Organizations

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Malware

42

Fileless Remcos RAT Delivered via LNK Files and MSHTA in PowerShell

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Malware1

30

ClickFix: How to Infect Your PC in Three Easy Steps

Krebs on SecurityMar 15, 00:00 UTC · Mar 15, 2025Malware

30

Malware peddlers experimenting with BPL sideloading and masking malicious payloads as PGP keys

Help Net SecurityAug 23, 08:23 UTC · Aug 23, 2024Malware

30

More Than Meets the Eye: Exposing a Polyglot File That Delivers IcedID

Palo Alto Unit 42Jun 5, 17:51 UTC · Jun 5, 2024Malware

30

MuddyWater expands operations

Kaspersky SecurelistOct 10, 10:00 UTC · Oct 10, 2018Malware

42

UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign

Cisco TalosJul 16, 10:00 UTC · Jul 16, 2026Malware

30

Researchers Uncover Batavia Windows Spyware Stealing Documents from Russian Firms

The Hacker NewsNov 6, 14:50 UTC · Nov 6, 2025Malware

30

Gamaredon targeted the military mission of a Western country based in Ukraine

Security AffairsApr 11, 07:09 UTC · Apr 11, 2025Malware

42

Gamaredon Uses Infected Removable Drives to Breach Western Military Mission in Ukraine

The Hacker NewsApr 10, 10:53 UTC · Apr 10, 2025Malware

30

Golden Chickens Unveils TerraStealerV2 and TerraLogger: New Credential Theft Tools Identified by Insikt Group

Recorded FutureJan 3, 00:00 UTC · Jan 3, 2025Malware

42

Russian Cyber Spies Target Organizations with Custom Malware

Infosecurity MagazineNov 22, 13:00 UTC · Nov 22, 2024Malware CVE-2024-23692

47

A new fileless variant of Remcos RAT observed in the wild

Security AffairsNov 11, 14:46 UTC · Nov 11, 2024Malware CVE-2017-0199

47

PEAKLIGHT Downloader Deployed in Attacks Targeting Windows with Malicious Movie Downloads

The Hacker NewsSep 26, 03:54 UTC · Sep 26, 2024Malware

30

LummaC2 Infostealer Resurfaces With Obfuscated PowerShell Tactics

Infosecurity MagazineAug 28, 17:15 UTC · Aug 28, 2024Malware

30

New banking trojan “CarnavalHeist” targets Brazil with overlay attacks

Cisco TalosMay 31, 12:00 UTC · May 31, 2024Malware

30

Suspected CoralRaider continues to expand victimology using three information stealers

Cisco TalosApr 23, 12:42 UTC · Apr 23, 2024Malware

30

BlueNoroff introduces new methods bypassing MoTW

Kaspersky SecurelistDec 27, 07:04 UTC · Dec 27, 2022Malware in the wild1

57

Russia-linked Gamaredon APT targeted a petroleum refining company in a NATO nation in August

Security AffairsDec 20, 20:55 UTC · Dec 20, 2022Malware

42

Hunting for LoLBins

Cisco TalosNov 13, 16:00 UTC · Nov 13, 2019Malware

30

91% of critical incidents involve known, legitimate binaries like PowerShell

Help Net SecurityJun 28, 00:00 UTC · Jun 28, 2018Malware

55

Go to HELL, PowersHELL : Powerdown the PowerShell Attacks

Security AffairsNov 15, 07:20 UTC · Nov 15, 2017Malware in the wild1

57

Malware campaign targets Russian

Security AffairsAug 11, 08:45 UTC · Aug 11, 2017Malware CVE-2017-0199

47

Hackers Leveraging Cloudflare Tunnels, DNS Fast

The Hacker NewsJun 29, 11:13 UTC · Jun 29, 2026Malware

42

Weedhack Attacks Minecraft Users, CountLoader Hits 86K, Miners Spread via Pirated Content

The Hacker NewsJun 29, 04:18 UTC · Jun 29, 2026Malware

30

Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT

The Hacker NewsJun 2, 09:05 UTC · Jun 2, 2026Malware

30

DeepLoad Malware Uses ClickFix and WMI Persistence to Steal Browser Credentials

The Hacker NewsMar 31, 06:09 UTC · Mar 31, 2026Malware

30

Investigating a New Click

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2026Malware

55

APT36 and SideCopy Launch Cross-Platform RAT Campaigns Against Indian Entities

The Hacker NewsFeb 11, 17:14 UTC · Feb 11, 2026Malware

55

PLUGGYAPE Malware Uses Signal and WhatsApp to Target Ukrainian Defense Forces

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2026Malware

42

New EVALUSION ClickFix Campaign Delivers Amatera Stealer and NetSupport RAT

The Hacker NewsJan 12, 08:28 UTC · Jan 12, 2026Malware

30

Hospitality Sector Hit By PHALT#BLYX ClickFix Malware Campaign

Infosecurity MagazineJan 6, 16:15 UTC · Jan 6, 2026Malware

30

Kimsuky Spreads DocSwap Android Malware via QR Phishing Posing as Delivery App

The Hacker NewsDec 19, 10:33 UTC · Dec 19, 2025Malware CVE-2024-38193

47

Astaroth Trojan abuses GitHub to host configs and evade takedowns

Security AffairsOct 13, 10:08 UTC · Oct 13, 2025Malware

30