Fake Web3 accelerator offers free Claude credits - its npm packages hijack your AI coding agent. https://intel.threadlinqs.com/threat/TL-2026-3389 #ThreatIntel #CloudSyncD #UACMe #REF8801

Fake Web3 accelerator offers free Claude credits - its npm packages hijack your AI coding agent. https://intel.threadlinqs.com/threat/TL-2026-3389 #ThreatIntel #CloudSyncD #UACMe #REF8801
AvisLoader's C2 runs over Tox P2P - no domain to sinkhole, delivered by fake DocuSign ClickFix lures. https://intel.threadlinqs.com/threat/TL-2026-3362 #ThreatIntel #AvisLoader #UACMe #ClickFix