Tag: HTA

Malware

HEADRUSH is a rogue Excel plugin used by UNC5976 to deliver an HTML Application (HTA) download. Discovered in April 2026, it is…

Excel plugin HEADRUSH HTA Ukraine

August 20, 2026

Malware

Antino is a Windows backdoor used by Jewelbug, delivered via malicious HTML Application (HTA) downloaders. It uses Microsoft Graph API for C&C…

Antino HTA Microsoft Graph API Windows backdoor

August 14, 2026