A fake CoinDesk exec DMed a researcher post-DEF CON with a doc that drops AMOS and a RAT. https://intel.threadlinqs.com/threat/TL-2026-2449 #ThreatIntel #AMOS #NetSupport #NetSupportRAT

ClearFake's EtherHiding chain uses BNB Smart Chain as a C2 dead-drop - malware delivered via WebDAV ClickFix. https://intel.threadlinqs.com/threat/TL-2026-2387 #ThreatIntel #Amatera #ZigCryptoStealer #Netsupport