Threat Intelligence Report April 21 to April 27, 2026
Excerpt
Threat name: Atemu RAT
Atemu RAT is a windows-based Remote Access Trojan (RAT) that’s primarily spread through ClickFix based attacks impersonating CloudFlare captchas to trick the user into pasting a malicious payload into PowerShell or cmd. The initial ClickFix payload uses ‘finger.exe’ to download and execute the second stage installer which contains the traditional RAT functionality. Once executed, the machine is registered on the C2 server…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by redpiranha.net on redpiranha.net.
On the same topics
- Lorem Ipsum Revisited: ClickFix Pivot & Rapid BrigantineBlueVoyant · Added 25 Oct
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Showboat Malware: Emerging Threats Targeting Telecom ProvidersLumen Black Lotus Labs · Added 25 Oct
- International law enforcement initiate hunt on malware group SocGholishDutch National Police · Published 18 Jun