At a glance Malware family PSK Agent (Go-based RAT), a shell-script dropper, and a PHP webshell Threat actor Unnamed; likely Chinese-speaking, per Imperva (moderate confidence) Targets Magento and Adobe Commerce stores in Western Europe, North America, and Asia-Pacific Delivery vector StyleSmuggler exploitation of CVE-2026-75650 Key capabilities Remote command execution, SOCKS5 proxying, DNS victim tracking, persistence TL;DR Between September 9 and 13, 2026, Imperva detected attacks that dropped the PSK Agent RAT on Magento and Adobe Commerce stores.