Weekly threat recap: credential theft, session hijacking, fast-moving exploit chains, and AI abuse patterns. Highlights include BigBear 2.0, HVNC, ClearFake/WebDAV, ChatGPT clipboard leakage, and Marimo CVE-2026-39987. #BigBear #ClearFake #AIabuse

A ClearFake WebDAV infection chain deployed Amatera malware. See how the ClearFake WebDAV infection chain drops crypto stealers on targets.

#ClearFake #Amatera #Malware #Cybersecurity #WebDAV #1

📢 ClearFake/WebDAV déploie Amatera Stealer, ZigCryptoStealer et NetSupport Manager

Cet article présente une analyse technique approfondie de deux chaînes d'infection parallèles découvertes après l'observation en avril 2026…

🟢 vérification factuelle haute
#AmateraStealer #ClearFake #Cyberveille

A fake CAPTCHA leads to credential theft, EDR take-down, and crypto theft—ClearFake’s latest is dangerously advanced. #SecurityNews #ClearFake #CryptoStealer #EDR #Malware #ThreatIntel thedailytechfeed.com/clearfakes-n...

Cisco Talos linked WebDAV chains to Amatera, ZigCryptoStealer, and NetSupport Manager, including a "verification.google" DLL run at a Ukrainian government org and a ClearFake path via Cloudflare Workers and EtherHiding. #Ukraine #Amatera #ClearFake

@talosintelligence.com
ClickFix/WebDAV chain delivers Amatera, ZigCryptoStealer and NetSupport for credential theft and remote access.
-
IOCs: 145[.]249[.]109[.]147, 45[.]150[.]34[.]2, paternal-angrily[.]com
-
#ClearFake #Malware #ThreatIntel

WordlistLoader turns English words into shellcode - DLL unhooking, ETW bypass, one-click wallet theft. https://intel.threadlinqs.com/threat/TL-2026-2367 #ThreatIntel #Amatera #ACR #ClearFake