Tag: deno

2 Attack Reports | 0 Vulnerabilities

Attack reports

Casting a Wider Net: Scaling Threat

LeakNet, a ransomware operator, has expanded its initial access methods by utilizing ClickFix lures on compromised websites and implementing a new Deno-based, in-memory loader. The group has shifted from relying on initial access brokers to running its own campaigns. LeakNet's post-exploitation pla…

social engineering

lateral movement

in-memory execution

Published: March 18, 2026

Downloadable IOCs: 5

CastleRAT attack first to abuse Deno JavaScript runtime to evade enterprise security

A sophisticated infection chain has been discovered that installs CastleRAT malware without leaving traces on disk. The attack uniquely abuses the Deno runtime as a malicious framework, combining social engineering, steganography, and in-memory execution to evade detection. The process involves tri…

social engineering

Published: March 11, 2026

Downloadable IOCs: 3

Click here to see more Attack Reports