Tag: spanish-portuguese-targeting

1 Attack Reports | 0 Vulnerabilities

Attack reports

REFUNDEE: Inside a Shadow Panel Phishing-as-a-Service Operation

An open directory discovery at refundonex[.]com exposed a complete Phishing-as-a-Service and RAT-as-a-Service platform targeting Spanish and Portuguese-speaking victims. The investigation uncovered 3,788 files including weaponized LNK, VBS, and AES-encrypted PowerShell payloads delivering a remote …
powershell
webdav
phishing-as-a-service
2026-04-13
rat-as-a-service
bulgarian-infrastructure
cryptocurrency-theft
refundee
shadow panel
shadow-panel
spanish-portuguese-targeting
Published: April 13, 2026
Downloadable IOCs: 17
Click here to see more Attack Reports