60
30
55
42
55
30
30
30
42
42
30
30
VectraRAT Can Hack Windows Enterprises for $250 per Month
VectraRAT malware-as-a-service sells a Windows implant with C2 infrastructure and operator panel for $250 per month.
VectraRAT is a full-service malware-as-a-service platform offering a Windows implant, command-and-control infrastructure, and an operator panel for comprehensive remote access to infected enterprises. Subscriptions cost $250 per month, lowering the barrier for criminal operators. The platform bundles all components needed to run remote-access campaigns.
45
30
30
42
60
60
42
42
Fake Minecraft Sites Are Still Spreading WeedHack After C2 Takedown
McAfee says WeedHack infostealer MaaS still spreads via ten fake Minecraft client sites and SEO poisoning despite C2 takedown, with 116,464 infections logged.
McAfee Labs' follow-up on the WeedHack Malware-as-a-Service operation, first documented in June 2026, found ten active fake Minecraft client sites and multiple file-hosting accounts still distributing the infostealer even after its C2 server went dark; over 6,300 user attempts were blocked in the past month. The campaign, running since January with 116,464 infected systems and 2,000-3,000 daily new victims, offered a free Discord-gated tier and a $5/month premium tier with webcam surveillance, and stole session cookies, passwords, browser data, and cryptocurrency wallets. Distribution relies on SEO poisoning that ranked fake sites such as nova-client.com above genuine GitHub repositories, with most malicious links coming via Discord (49.6%) and MediaFire (23.4%), and one fake site built with the AI website builder lovable.app.
45
MaaS Campaign Combines ClickFix, ErrTraffic and Cruciferra
eSentire uncovered a malware-as-a-service campaign pairing ClickFix social-engineering lures with the ErrTraffic and Cruciferra malware families.
Threat researchers at eSentire identified an ongoing malware-as-a-service (MaaS) campaign that combines ClickFix social-engineering lures with the ErrTraffic and Cruciferra malware families. The campaign relies on ClickFix-style deception to trick users into executing malicious actions that deliver the malware. Further technical detail on affected sectors or infection volumes was not provided in the disclosure.
35
30
42
60
42
42
57
30
60
30
42
30
30
30
30
42
30
30
42