
DarkCore RAT marketed to reuse Gmail and WhatsApp sessions
BlackFog verified a Windows sample’s config and modules, not every seller-advertised browser feature.
3 stories, newest first · one card per story

BlackFog verified a Windows sample’s config and modules, not every seller-advertised browser feature.

Version 1.1.2 adds hidden desktop control, a shell, and a loader; Varonis ties its helper to StealC 3.5.

A custom HVNC backdoor is targeting Latin American financial organizations via fake DocuSign and NFe tax-document lures, giving attackers hidden persistent remote access.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views