Tarnkappe.infoFeb 21
📬 ClickFix Malware-Kampagne: Fake-Cloudflare-Check installiert unbemerkt MIMICRAT
#ITSicherheit #Malware #AMSIBypass #ClickFix #ETWBypass #FilelessMalware #MIMICRAT #PowerShell #ReflectiveLoading #RemoteAccessTrojaner #socialengineering #WindowsMalware https://sc.tarnkappe.info/0dde49
ClickFix Malware-Kampagne: Fake-Cloudflare-Check installiert unbemerkt MIMICRAT

ClickFix Malware-Kampagne verteilt MIMICRAT über Fake-Cloudflare-Seiten mit fünfstufiger Infektionskette, AMSI-/ETW-Bypass und HTTPS-C2.

TARNKAPPE.INFO
Sascha StumplerFeb 1, 2025
Exploring PowerShell Reflective Loading in Lumma Stealer http://dlvr.it/THjpsn via PlanetPowerShell #PowerShell #ReflectiveLoading #LummaStealer #CyberSecurity
Exploring PowerShell Reflective Loading in Lumma Stealer

One of the most common techniques I’ve seen used by threat actors to deliver Lumma Stealer payloads to victims is Reflective Loading, leveraging the .NET library. Reflective Loading is a technique…

Medium