Tag: lua loader

2 Attack Reports | 0 Vulnerabilities

Attack reports

MIMICRAT: ClickFix Campaign Delivers Custom RAT via Compromised Legitimate Websites

A sophisticated ClickFix campaign has been uncovered, compromising legitimate websites to deliver a multi-stage malware chain. The attack culminates in MIMICRAT, a custom remote access trojan with advanced capabilities. The campaign uses compromised sites across industries and geographies for deliv…
rat
powershell
clickfix
multi-stage attack
lua loader
compromised websites
socks5 proxy
token theft
2026-02-20
mimicrat
Published: February 20, 2026
Downloadable IOCs: 8

Not All Fun and Games: Lua Malware Targets Educational Sector and Student Gaming Engines

Over the past year, the delivery of Lua malware appears to have undergone simplification, possibly to reduce exposure to detection mechanisms. The malware is frequently delivered using obfuscated Lua scripts instead of compiled Lua bytecode, as the latter can trigger suspicion more easily.
ransomware
powershell
redline
lua script
compiler
redline stealer
2024-10-09
morphisec
lua malware
lua loader
c2 lua
windows servers
linux server
prometheus
crypter
Published: October 9, 2024
Downloadable IOCs: 18
Click here to see more Attack Reports