CrocoRat hides its payload in DNS TXT records - ClickFix gets a stealthy new twist. https://intel.threadlinqs.com/threat/TL-2026-3283 #ThreatIntel #CrocoRat #ZLib #ClickFix

CrocoRat hides its payload in DNS TXT records - ClickFix gets a stealthy new twist. https://intel.threadlinqs.com/threat/TL-2026-3283 #ThreatIntel #CrocoRat #ZLib #ClickFix
Novinarya's Android stealer hides its live C2 in a marketplace shop bio - rotate servers, no new APK. https://intel.threadlinqs.com/threat/TL-2026-3128 #ThreatIntel #Novinarya #ZLib #Smart