Cabbage RAT: PowerShell-Based Remote Access Trojan
Cabbage RAT, also known as CageyChameleon, is a PowerShell-based remote access trojan used by North Korean threat actors for credential and data…
Tag: credential theft
INFINITERED: Custom Malware Targeting REDCap Servers
INFINITERED is custom malware deployed by UNC6508 that trojanizes REDCap system files. It hijacks the upgrade process to persist, harvests login credentials…
Fortinet FortiClient EMS Vulnerability CVE-2026-35616
A critical flaw in Fortinet FortiClient EMS (CVE-2026-35616, CVSS score: 9.1) exploited by threat actors to deploy EKZ Stealer for credential harvesting…
RMMProject: A Lua-Scriptable DLL for Credential Theft and Remote Control
RMMProject is a Lua-scriptable DLL that enables remote screen control and browser credential theft by bypassing Chromium's App-Bound Encryption. It includes modules…
145 Mastra npm Packages Compromised in Supply Chain Attack, Crypto-Stealer Deployed
On June 17, 2026, a software supply chain attack codenamed 'easy-day-js' compromised 145 npm packages under the @mastra/* namespace, a popular open-source…
RustDesk: Open-Source Remote Desktop Software Exploited by Armored Likho
RustDesk is an open-source remote desktop software that Armored Likho installs on compromised machines. The stealer prompts victims to enter credentials, then…
Python Keylogger Used by Poisson Operator
A 70-line Python keylogger was deployed by the attacker to capture keystrokes, storing them locally for manual retrieval, targeting banking and email…
INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023
Cybersecurity researchers have charted the evolution of INC from a nascent ransomware-as-a-service (RaaS) operation to one of the most prolific cybercrime groups…
RedLine: A Pervasive Information Stealer Malware
RedLine is an information stealer malware that targets credentials, browser data, and cryptocurrency wallets. It is commonly distributed via phishing and malicious…
Lumma: An Emerging Information Stealer Malware
Lumma is an information stealer malware that captures sensitive data such as passwords, cookies, and cryptocurrency information. It is often spread through…