NetSupport Loader buries its RAT dropper under three PowerShell layers of decimal math, AES and GZIP. https://intel.threadlinqs.com/threat/TL-2026-4810?utm_source=bluesky #ThreatIntel #NetSupport #NetSupportManager
October 30, 2026 at 8:27 AM
NetSupport Loader buries its RAT dropper under three PowerShell layers of decimal math, AES and GZIP. https://intel.threadlinqs.com/threat/TL-2026-4810?utm_source=bluesky #ThreatIntel #NetSupport #NetSupportManager
No exploit needed: fake CAPTCHAs, sign-in pop-ups and device codes turn the browser into the attack path. https://intel.threadlinqs.com/threat/TL-2026-3996 #ThreatIntel #NetSupportManager #Action1 #Lumma
October 21, 2026 at 1:48 AM
No exploit needed: fake CAPTCHAs, sign-in pop-ups and device codes turn the browser into the attack path. https://intel.threadlinqs.com/threat/TL-2026-3996 #ThreatIntel #NetSupportManager #Action1 #Lumma
CastleLoader tricks you into pasting your own malware, then hides inside a Python interpreter to inject it. https://intel.threadlinqs.com/threat/TL-2026-2589 #ThreatIntel #CASTLELOADER #NightshadeC2 #NetSupportManager
September 20, 2026 at 8:43 PM
CastleLoader tricks you into pasting your own malware, then hides inside a Python interpreter to inject it. https://intel.threadlinqs.com/threat/TL-2026-2589 #ThreatIntel #CASTLELOADER #NightshadeC2 #NetSupportManager
A sophisticated malware campaign utilizes structurally sound fake MP4 files to deliver NetSupport Manager and seize control of victim computers.
#CyberSecurity #Malware #InfoSec #NetSupportManager #ClickFix
#CyberSecurity #Malware #InfoSec #NetSupportManager #ClickFix
Fake MP4 Files Conceal Malware
Sometimes, threat actors utilize video files not for mere viewing, but for cunning concealment. Censys specialists recently discovered a sophisticated malware campaign. This campaign actively deploys structurally sound, yet entirely unplayable MP4 files. These files stealthily deliver the NetSupport Manager application. Consequently, following a covert installation, this legitimate remote administration tool grants attackers persistent, unauthorized control over the compromised computer.
meterpreter.org
September 3, 2026 at 3:26 AM
A sophisticated malware campaign utilizes structurally sound fake MP4 files to deliver NetSupport Manager and seize control of victim computers.
#CyberSecurity #Malware #InfoSec #NetSupportManager #ClickFix
#CyberSecurity #Malware #InfoSec #NetSupportManager #ClickFix
A fake-CAPTCHA paste unpacks a layered PowerShell loader that quietly turns NetSupport into a full spy RAT. https://intel.threadlinqs.com/threat/TL-2026-1487 #ThreatIntel #NetSupportManager #NetSupport #SmartApeSG
July 18, 2026 at 1:55 PM
A fake-CAPTCHA paste unpacks a layered PowerShell loader that quietly turns NetSupport into a full spy RAT. https://intel.threadlinqs.com/threat/TL-2026-1487 #ThreatIntel #NetSupportManager #NetSupport #SmartApeSG