SOCRadarPublished
Introducing DOUBLECUP, a ClickFix Loader Delivering CountLoader and DeviceManager RATs
By ameer
Excerpt
The DOUBLECUP panel provides multiple utilities to load an operator’s final payload. The first stage drops a steganographic PNG image into the browser’s cache, retrieves its hidden content, and executes the second stage. This second stage decrypts the final payload in memory via a custom SHA-256 stream…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by SOCRadar on socradar.io.
More from SOCRadar5
- Dark Web Profile: ExfilSquadSOCRadar · Published 28 Jul
- Dark Web Profile: ShinyHuntersSOCRadar · Published 18 Mar 2024
- orova Ransomware Group ProfileSOCRadar · Added 10 Aug
- gammax Ransomware Group ProfileSOCRadar · Added 9 Aug
On the same topics
- Lorem Ipsum Revisited: ClickFix Pivot & Rapid BrigantineBlueVoyant · Added 25 Oct
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Showboat Malware: Emerging Threats Targeting Telecom ProvidersLumen Black Lotus Labs · Added 25 Oct
- International law enforcement initiate hunt on malware group SocGholishDutch National Police · Published 18 Jun
