The hoster primarily served malicious infrastructure associated with RATs 🖥️ (e.g., PureRAT and OverlordRAT), rogue ScreenConnect servers 🔌, and social engineering malware campaigns like ClickFix and ErrTraffic 🖱️.

VLC & VMware Tools hijacked via DLL side-loading in stealthy malware with Overlord & Lampion. #Malware #Security #OverlordRAT #DLLSideLoading #CyberThreat #VMware thedailytechfeed.com/vlc-and-vmwa...

⚠️📢 A fake legal notice can lead to remote control of your PC as researchers traced a new campaign delivering #OverlordRAT through phishing emails impersonating Brazilian notary offices.

Listen/Read: hackread.com/overlord-rat...

#Malware #Cybersecurity #Windows #Brazil #Phishin

MALFEX uses npm packages (like function-flag, tldriver) to drop Overlord RAT and stealer on Windows via postinstall hooks. #Malware #npm #OverlordRAT #SupplyChain https://thedailytechfeed.com/eight-malicious-npm-packages-installed-over-40k-times-discovered-spreading-overlord-rat-stealer/

Overlord RAT 🔌 dropped by Amadey loader 🔥

Botnet C2 server:
mypamella .xyz ➡️ NameSilo 🇺🇸
136.175.82.88:443 ➡️ 2ETELECOM🇧🇬

Payload is bulletproof hosted 🛡️at Omegatech LTD 🇳🇱
🌐 urlhaus.abuse.ch/url/3906755/

📄 Malware sample:
bazaar.abuse.ch/sample/ac1f8...

StealC C2s dropping OverlordRAT, using CloudFlare and Microsoft look-a-like domains 👁️
🌐 cloud-flare-authenticator .link
🌐 cloud-flare-authenticator .click
🌐 update-microsoft-data .services
📡 89.34.90.45:443

OverlordRAT #botnet C2 server ⤵️
🌐 download-windows-update .live
📡 151.243.113.94:5173

Thank you so much!!! I think overlordrat on Instagram made it!!!

day 16 of 50, HYPE VS GRIFFIN, out tonight @ 8 PM EST … we shall see who wins … it’s not gonna be Peter Griffin … it’s gonna be A Hype!!! first of TWO albums dropping today, I’ll announce the second one soon!!! Haha!!! cover art by overlordrat