SecurityBleepingComputerabout 2 hours ago
DOUBLECUP ClickFix Hides Malware in Browser Cache
1 min read
A Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by browsers, delivering CountLoader and a new DeviceManager RAT to Windows and macOS. SOCRadar discovered the service, which has operated since early June 2026, impersonating NetSuite, Odoo, HubSpot, and Salesforce.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
