SecurityThe Hacker Newsabout 3 hours ago
DOUBLECUP LaaS Delivers CountLoader and DeviceManager RATs
1 min read
DOUBLECUP, a Russian loader-as-a-service, uses ClickFix lures to stage steganographic PNGs in browser cache, delivering CountLoader and DeviceManager RAT. Active since June 2026, it employs environmental keying with victim IPs and EtherHiding for C2. SOCRadar identified the service via an open directory.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
