SloppyRAT uses ClickFix to help ransomware attackers gain access, gather data, and spread across compromised networks.

Security researchers have uncovered a new remote access trojan named SloppyRAT that may help ransomware operators gain an ...

IntroductionIn June 2026, Zscaler ThreatLabz identified a new malware family, tracked as SloppyRAT, that is likely leveraged by a ransomware-related threat actor. ThreatLabz observed SloppyRAT being ...

PEEP is described as a post-compromise framework as it lacks an initial access vector itself, meaning it requires the ...

Les scammers migrent de plus en plus de l’email vers les plateformes de collaboration d’entreprise comme Microsoft Teams pour ...

Living-off-the-land binaries, often shortened to LOLBins, are legitimate Windows executables that attackers abuse to carry out malicious activity while blending in with normal administration. The ...

Microsoft says TerminalFix uses fake Cloudflare CAPTCHAs to trigger PowerShell and deploy a reverse-tunnel backdoor for internal network access.

A TerminalFix campaign, a ClickFix variant, is using fake Cloudflare CAPTCHA prompts to trick users into executing PowerShell ...

Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.

LoopTroop 0.5.x is now complete at v0.5.9. This is the release series where LoopTroop became installable software. It gained a CLI, a background service, one-line installers, package channels, ...

DSH Plugin Development is an open-source Codex plugin and Agent Skill for designing, implementing, packaging, auditing, and diagnosing DeepSeek Harness plugins. It first classifies the request as a ...

SkillSpector is an open-source scanner from NVIDIA that reads an agent skill and tells you whether to install it. Point it at a directory, a zip file, a single SKILL.md, or a Git URL, and it returns a ...