Skip to content
Threat Feed
Subscribe

Tag

Malware-as-a-Service

3 briefs RSS
high advisory

Unpacking 'Cruciferra': Analysis of a Sophisticated Crypter Service

Cruciferra is a sophisticated crypter-as-a-service, written in Mono, actively developed and sold to multiple cybercriminal threat actors who use it to deliver a wide range of remote access trojans and infostealers, employing extensive defense evasion techniques like BYOVD-based EDR tampering, Process Ghosting, and unique cryptographic obfuscation via email-based phishing campaigns.

crypter malware-as-a-service defense-evasion remote-access-trojan infostealer windows
1r 10t 11i
high threat

ACR Stealer Campaigns Use ClickFix Lures, WebDAV, and Steganography for Credential Theft

Microsoft Defender Experts observed increased ACR Stealer activity from late April to mid-June 2026, using ClickFix social engineering lures in two distinct campaigns to steal browser credentials, authentication tokens, and sensitive documents from enterprise environments via WebDAV-based Python loaders or MSHTA-initiated PowerShell with steganography.

Windows ACR Stealer infostealer malware-as-a-service social-engineering webdav powershell steganography credential-theft data-exfiltration
2r 18t
high advisory

Mirax RAT Targeting Android Users in Europe

Mirax RAT, a new Android RAT distributed as MaaS, is targeting European users by turning infected devices into residential proxy nodes and enabling credential theft via overlay and notification injection.

android rat mirax malware-as-a-service proxy
2r 4t