Tag: payload staging

2 Attack Reports | 0 Vulnerabilities

Attack reports

Contagious Interview: Evolution of VS Code and Cursor Tasks Infection Chains - Part 1

This intelligence report details the evolution of malware delivery techniques targeting integrated development environments (IDEs) like Visual Studio Code and Cursor. The threat actors, known as Contagious Interview, have expanded their payload staging methods to include GitHub Gists, URL shortener…
obfuscation
beavertail
visual studio code
payload staging
weaselstore
url shorteners
pyarmor
2026-02-27
bytecode vm
cursor
github gists
ide
Published: February 27, 2026
Downloadable IOCs: 6

AsyncRAT Campaigns Uncovered: How Attackers Abuse ScreenConnect and Open Directories

This intelligence report details a sophisticated attack campaign leveraging trojanized ConnectWise ScreenConnect installers to deliver AsyncRAT payloads. Attackers use open directories as staging points, blending legitimate remote management software abuse with custom loaders and scripts. The campa…
obfuscation
screenconnect
phishing
persistence
asyncrat
remote access trojan
c2 infrastructure
open directories
CVE-2025-3935
powershell rat
2025-09-19
payload staging
Published: September 19, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports