ClearFake: Threat Cluster Using ClickFix Lures
ClearFake is a threat cluster known for compromising legitimate websites and planting fake CAPTCHA lures that use ClickFix-style social engineering decoys. It…
Tag: malware distribution
Lovable: AI-Powered Website Builder
Lovable is an AI-powered website builder that was used to create a fake Minecraft client site distributing Weedhack malware. Its accessibility lowers…
Water Curse: Threat Cluster Using GitHub Ghost Network
Water Curse is a threat cluster tracked by Trend Micro that operates a GitHub-based ghost network to redirect users to malware-laced payloads.…
HeroSMS: SMS Service Used as Decoy
HeroSMS is a service used by Lurking Lizard as a decoy to distribute proxy malware.
PhantomRaven Campaign Uses AI-Hallucinated Package Names for Malware Distribution
PhantomRaven is a campaign that registered fake npm package names hallucinated by AI coding tools. It hid malware in 126 npm packages,…
Edge Add-ons Store: Microsoft’s Browser Extension Marketplace
The Edge Add-ons store is Microsoft's marketplace for browser extensions. It was the distribution channel for 119 malicious extensions in the StegoAd…
YouTubeTA: StealC Affiliate Distributing Malware via YouTube
YouTubeTA is a customer of the StealC MaaS operation who used Google's YouTube platform to distribute the stealer by advertising cracked versions…