Cybersecurity & Data Protection
1
UPVOTE
thehackernews.com

ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure

Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) called ChainScript. "ChainScript has appeared under multiple build names, including ComponentTask33, UpdateDigital, HostShared, and OrchidViolet66, while presenting itself as Spotify, Zoom Workplace, and Microsoft Teams software," Blackpoint Adversary Pursuit Group (APG)
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
CA

Carlos

9h ago
1 0

Discussion

Begin the discussion

Begin something meaningful by sharing your ideas.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

JO

jordan af

jordan afUpvoted 2h ago0 comments · 91 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

thehackernews.com
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, Cl…

A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things people alrea…
TN

The Hacker News

12m ago
0
bleepingcomputer.com
Microsoft reminds admins to migrate Entra ID users to passkeys

Microsoft has reminded admins to migrate Entra ID users to phishing-resistant authentication methods to avoid sign-in disruptions after it retires SMS first-fa…
CA

Carlos

3h ago
0
bleepingcomputer.com
Microsoft: September updates break File History backup feature

Microsoft warned that the built-in File History backup feature in Windows may stop working on some systems after installing the September 2026 security updates…
LK

Lars Khan

4h ago
0
thehackernews.com
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF an…

The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information techno…
TN

The Hacker News

9h ago
0
bleepingcomputer.com
Malicious npm packages evade install-script defenses at runtime

An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by hiding malicious code in a packag…
NightCurator

NightCurator

1d ago
0
bleepingcomputer.com
BragJack attacks hijack AI browser agents through malicious ext…

BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in…
alex but tired

alex but tired

2d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, Cl…

A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things people alrea…
TN

The Hacker News

12m ago
0
thehackernews.com
Jade Sleet Linked to Indian IT Provider Breach With FLATROOF an…

The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information techno…
TN

The Hacker News

9h ago
0
thehackernews.com
Can You Prove a New CVE Is Exploitable Before Attackers Do? Lea…

A new CVE drops. Your scanner finds it. The severity score looks ugly. But that still does not answer the question that matters: Can it actually be exploited…
Thanakorn Boon

Thanakorn Boon

2d ago
0
thehackernews.com
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Account…

Three researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of sev…
Rosa Martinez

Rosa Martinez

2d ago
0
thehackernews.com
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private Gi…

An attacker copied about 170 of CrowdSec's private GitHub repositories on May 22 using the account of an employee who had just left, CrowdSec said on Sept…
CA

Carlos

2d ago
0
thehackernews.com
Public Exploits Released for Four Linux Kernel Flaws That Enabl…

A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain root, the highest level of access on a mach…
TN

The Hacker News

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest