📢 DarkMe RAT : Water Hydra abandonne les zero-days pour le phishing par fichier .pif

Cet article documente deux incidents distincts détectés le 31 août 2026 impliquant le malware DarkMe, un RAT/espion écrit en Visual Basic 6 (VB6)…

🟢 vérification factuelle haute
#DarkMe #WaterHydra #Cyberveille

DarkMe RAT shifts to simple phishing emails instead of zero-days, expanding its reach to corporate targets. #DarkMe #RAT #phishing #corporateTargets https://www.helpnetsecurity.com/2026/09/23/darkme-rat-phishing-email-hits-corporate-targets/

Water Hydra's DarkMe RAT campaign pivots from zero-days to simple phishing. New attacks use malicious .pif files, process hollowing, and COM hijacking for persistence to steal crypto wallets. #DarkMe #WaterHydra #Phishing #Malware #ThreatIntel

🌐 cyber[.]netsecops[.]io

@huntress.com
DarkMe spreads via phishing emails and .pif files, using VB6 loaders, persistence, and process hollowing.
-
IOCs: onlineview365[.]com, thatawful[.]boutique, 67[.]43[.]50[.]11
-
#DarkMe #Malware #ThreatIntel