A new PHALT#BLYX campaign targets European hotels using fake Booking.com emails, ClickFix lures, PowerShell, and MSBuild to ...
Multi-stage malware campaign targets hospitality organizations using social engineering and abuse of MSBuild.exe ...
Threat actors are using the social engineering technique to deploy the DCRat remote access Trojan against targets in the hospitality sector.
A sophisticated ClickFix campaign is targeting entities in the hospitality sector to infect them with the DCRat remote access ...
Securonix is detailing a multi-stage campaign that starts with a bogus Booking.com message that runs through a ClickFix technique and a fake Blue Screen of Death before dropping the DCRat malware that ...
A new NuGet typosquatting campaign pushes malicious packages that abuse Visual Studio's MSBuild integration to execute code and install malware stealthily. NuGet is an open-source package manager and ...
Threat actors are abusing the Microsoft Build Engine (MSBuild) to deploy remote access tools (RATs) and information-stealing malware filelessly as part of an ongoing campaign. MSBuild (msbuild.exe) is ...