
Blind Eagle phishing uses fake court notices to deliver a RAT
Zenox reports no confirmed successful infections; the in-memory payload is an AsyncRAT fork with DCRat lineage.
6 stories, newest first · one card per story

Zenox reports no confirmed successful infections; the in-memory payload is an AsyncRAT fork with DCRat lineage.

Doctor Web says Visual Studio and script repos drop AsyncRAT, a clipocurrency clipper, and a browser stealer.

Attackers use AutoIt and an invoice-themed batch file to inject AsyncRAT into Microsoft-signed charmap.exe for stealthy remote access.

Point Wild details a five-stage AsyncRAT campaign using AutoIt abuse and process injection to hide a .NET RAT inside Microsoft's signed charmap.exe.

Recorded Future's H1 2026 report finds 215 actively exploited CVEs, RAT dominance, NFC payment fraud, and AI-augmented but not autonomous tradecraft.

Infoblox finds dropcatch expired domains fuel malware delivery and C2, with actor Sable Squirrel spending ~$7M on 10,000+ domains.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views