Threat actor
LightBasin
Malpedia aka CL-CRI-1171
Tracked by CyberSIXT since Sep 9, 2026 · last activity Sep 14, 2026
Coverage timeline
RSS-
OfferLoader Campaign Uses YouTube and SEO Poisoning to Spread Malwaresecurityonline.info · Sep 14, 2026
-
OfferLoader Campaign Hides Three Payloads Behind Fake Software Installersunit42.paloaltonetworks.com · Sep 9, 2026