A leading external threat landscape management company transforming cyber threat intelligence by giving attack surface, brand, Vulnerability intelligence along with digital risk monitoring, situationa...

YouTube video by Specter

YouTube video by Cybernews

Italian invoice-themed phishing campaign targeting users since February 2026. The infection chain abuses HTML attachments, fake download pages, JavaScript, PowerShell, and UpCrypter to deploy a final ...

  A new type of digital threat is quietly spreading online, and it’s mainly affecting people who use Windows computers. This threat, called Neptune RAT, is a kind of harmful software that allows hackers to take over someone’s system from a distance. Once installed, it can collect personal data, spy on the user’s activity, and even lock files for ransom. What’s especially worrying is how the virus is spreading. It’s being shared through common platforms like YouTube, GitHub, and Telegram. Hackers are offering this tool as part of a paid service, which makes it easier for many cybercriminals to get access to it. What Makes Neptune RAT So Dangerous? Neptune RAT is not an ordinary computer virus. It can do many harmful things at once, making it a serious risk to anyone who accidentally installs it. One of its tricks is swapping digital wallet addresses during cryptocurrency transfers. This means someone could send money thinking it’s going to the right person, but it actually ends up in a hacker’s account. Another feature allows it to collect usernames and passwords stored on the victim’s device. It targets popular programs and web browsers, which could let hackers break into email accounts, social media, or online banking services. Even more troubling, Neptune RAT includes a feature that can lock files on the user’s system. The attacker can then demand money to unlock them— this is what’s known as ransomware. To make things worse, the virus can turn off built-in security tools like Windows Defender. That makes it much harder to spot or remove. Some versions of the virus even allow hackers to view the victim’s screen while they’re using it, which could lead to serious privacy issues. If the hacker decides they no longer need the device, the virus can erase all the data, leaving the victim with nothing. How to Stay Protected To avoid being affected by this virus, it’s important to be careful when clicking on links or downloading files— especially from YouTube, GitHub, or Telegram. Never download anything unless you fully trust the source. Although antivirus software is helpful, this particular virus can get past many of them. That’s why extra steps are needed, such as: 1. Using different passwords for each account   2. Saving important files in a secure backup   3. Avoiding links or downloads from strangers   4. Enabling extra security features like two-factor authentication Staying alert and employing good online habits is the best way to avoid falling victim to harmful software like Neptune RAT.

The malware's creators insist a new open source version of Neptune is for educational use by pentesters, but a raft of sophisticated backdoor and evasion capabilities says otherwise.

Italian invoice-themed phishing campaign targeting users since February 2026. The infection chain abuses HTML attachments, fake download pages, JavaScript, PowerShell, and UpCrypter to deploy a final NeptuneRAT/MasonRAT payload.

Italian invoice-themed phishing campaign targeting users since February 2026. The infection chain abuses HTML attachments, fake download pages, JavaScript, PowerShell, and UpCrypter to deploy a final ...

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread