CyberSecurityBoardThreat Intel · CVEs · Products
Cyber Products

Cloudflare Workers: Abused for C2 Proxy in PINHOLE RAT

June 29, 2026

Cloudflare Workers is a serverless execution environment that is being abused by PINHOLE RAT to proxy C2 communication. The malware uses high-reputation platforms like Pinterest and SurveyMonkey as DDRs to obtain C2 details and then proxies traffic through Cloudflare Workers.