WhatsApp Attachment Deploys Malware That Gains SYSTEM Access on Windows
A WhatsApp ZIP lure deploys VulcanRAT207.A, a Windows RAT that escalates to SYSTEM and sideloads via VulkanInfo.
Stories per day · 30 days
2 RSS
5 stories, newest first · one card per story
Stories tagged #scheduled-task
RedFlick Uses Scheduled Tasks and Password-Protected Archives to Deploy CosmicPulse Backdoor
Star Blizzard ran 13 RedFlick phishing campaigns in 2026, deploying CosmicPulse against more than 100 organizations.
2
Fortinet Uncovers SectopRAT Variant Hidden Inside Tampered Legitimate Windows Software
Fortinet found SectopRAT hidden in tampered Italian audio software, using DLL tampering, scheduled tasks, and in-memory loading for remote control and credential theft.
4
Researchers Found a Windows RAT That Turns Victims’ Screens Into Live Streams
Point Wild detailed BotHelper, a Windows RAT that live-streams victim screens and tampers with AMSI.
5
Sauron Loader Malware Uses DLL Side-Loading and In-Memory Decryption to Evade Detection
Sauron Loader, sold to Russian-speaking criminals, uses DLL side-loading and memory decryption against German organizations.
13