social engineering 7 credential theft 7 clickfix 6 phishing 5 credential harvesting 4 supply chain attack 3 dll sideloading 3 vishing 2 ci/cd targeting 2 initial access broker 2 fakeupdates 2 ztds 2 bulletproof hosting 2 lolbins 2 netsupport rat 2 castleloader 2 impacket 2 valleyrat 2 minecraft 2 spear phishing 2 smishing 2 infostealer 2 typosquatting 2 information stealer 2 cryptocurrency fraud 2 phishing-as-a-service 2 process hollowing 2 seo poisoning 2 quick assist 1 email bombing 1 microsoft teams 1 google drive c2 1 java rat 1 nimbus rat 1 dependency confusion 1 reconnaissance payload 1 environment fingerprinting 1 lifecycle hooks 1 npm supply chain 1 obfuscation 1 browser impersonation 1 gammaworm 1 gammaload 1 pteranodon 1 gamaredon 1 gammasteal 1 gammaphish 1 fsb 1 npm compromise 1 shai-hulud 1 china-linked 1 taiwan 1 spearphishing 1 azureveil 1 adaptix agent 1 rustcloak 1 adaptix 1 czech republic 1 bof execution 1 azure cloud c2 1 shellcode 1 autoit 1 process injection 1 donutloader 1 in-memory execution 1 remcos rat 1 drive-by attacks 1 drivesurge 1 macos targeting 1 android rat 1 latin america 1 phishing campaigns 1 spysolr evolution 1 apk builder 1 remote access 1 brazil 1 accessibility abuse 1 malware-as-a-service 1 spysolr 1 btmob 1 vshell 1 proxylogon exploitation 1 godzilla 1 exchange server compromise 1 ringq 1 godzilla webshell 1 shadowpad 1 noodlerat 1 reflective loader 1 energy sector 1 cve-2024-2617 1 rubeus 1 dynowiper 1 lazywiper 1 destructive operations 1 fortigate exploitation 1 combined heat power 1 renewable energy 1 poland infrastructure 1 industrial control systems 1 wiper attack 1 python backdoor 1 silver fox 1 winos 4.0 1 ABCDoor 1 rdp-enablement 1 credential-theft 1 sslvpn-compromise 1 nssm-persistence 1 reverse-shell 1 komari 1 github-infrastructure 1 game server targeting 1 ddos-for-hire 1 mirai-derived 1 vltrig 1 xlabs_v1 1 mirai 1 bandwidth profiling 1 iot botnet 1 adb exploitation 1 fake login page 1 vendor email compromise 1 supply chain 1 ai platform abuse 1 markdown file 1 httpspy 1 webex spoofing 1 loaddll.dll 1 south korea targeting 1 memloader 1 jsonping 1 calc.exe 1 kimsuky 1 spyloader.dll 1 rat 1 spyinster.dll 1 sidecopy 1 xenorat 1 transparent tribe 1 apt36 1 pashto lure 1 provincial targeting 1 multi-stage loader 1 afghanistan ministry of finance 1 hta payload 1 phaas 1 mfa bypass 1 phoenix system 1 financial fraud 1 bts injection 1 browser data 1 chromelevator 1 grabbot 1 node.js loader 1 syscalls evasion 1 lofystealer 1 slinky 1 elasticsearch 1 supply-chain-attack 1 opensearch 1 npm 1 go language 1 kazuar 1 ransomware-as-a-service 1 the gentlemen 1 endpoint exploitation 1 ekz infostealer 1 forticlient ems 1 vpn configuration abuse 1 cve-2026-35616 1 lumma stealer 1 powershell 1 hijackloader 1 lummastealer 1 government impersonation 1 payment card theft 1 multi-country campaign 1 postal service fraud 1 audiofix 1 npm trojan 1 linkedin phishing 1 macos 1 cryptocurrency 1 ci/cd hijacking 1 minirat 1 developer targeting 1 domain generation algorithm 1 fake updates 1 xmrig 1 dns tunneling 1 silentcryptominer 1 cryptocurrency miner 1 dll side-loading 1 piracy sites 1 blackfile 1 data exfiltration 1 saas attacks 1 unc6671 1 extortion 1 cordial spider 1 the com 1 ticket fraud 1 ghost stadium 1 credential phishing 1 facebook advertising exploitation 1 fifa world cup 2026 1 cryptojacking 1 screenconnect abuse 1 gpu mining 1 simplerunpe 1 blockchain c&c 1 etherhiding 1 sectoprat 1 clearfake 1 bnb smart chain 1 acrstealer 1 cryptocurrency wallets 1 purelogs 1 poolrat 1 pondrat 1 dpapiloader 1 themeforestrat 1 hellsgate 1 remotepeloader 1 remotepe 1 oauth abuse 1 token theft 1 kali365 1 microsoft 365 1 inbox rules 1 device code phishing 1 zero-day exploitation 1 bluebeam 1 viewstate deserialization 1 cobalt strike 1 bluebeam web shell 1 rooting 1 rootnik 1 android 1 app promotion 1 wifi credentials 1 information theft 1 developer compromise 1 rce backdoor 1 laravel 1 confluence exploitation 1 kerberos relay 1 operation epic fury 1 minifast 1 minijunk 1 nimbus manticore 1 appdomain hijacking 1 minijunk v2 1 screening serpens 1 appdomainmanager hijacking 1 iran nexus 1 vbcloud 1 powershower 1 reversesocks 1 phantomheart 1 powercloud 1 cloud atlas 1 cryptocurrency theft 1 amos stealer 1 ai agent exploitation 1 cursor 1 applescript 1 persistent implant 1 rtf exploitation 1 ctos rat 1 uwarrior 1 gopherwhisper 1 laxgopher 1 ratgopher 1 boxoffriends 1 go-based backdoors 1 jabgopher 1 china-aligned apt 1 frienddelivery 1 deno runtime 1 caddy proxy 1 tsundere botnet 1 sumatrapdf 1 cobaltstrike 1 adaptixc2 beacon 1 entryshell 1 toshis 1 tropic trooper 1 chinese targets 1 cobaltstrike beacon 1 toshis loader 1 adaptixc2 1 github c2 1 scheduled task 1 cmdkey 1 unc path 1 remote dll 1 regsvr32 1 dprk 1 astrill vpn 1 vpn infrastructure 1 freelance platforms 1 fake it workers 1 residential proxies 1 sanctions evasion 1 docker hub poisoning 1 github actions 1 mcpaddon.js 1 npm propagation 1 ci/cd compromise 1 canister worm 1 checkmarx kics 1 vs code extension 1 supply chain compromise 1