corpus.blog
41,554 blogs · 5,217,468 posts Claim your blog
Record · corpus.blog/posts/01a08215-7ff6-704b-ac9e-4433c9bc15e3

ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager

Talos Blog · published 8 September 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.talosintelligence.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
15
Words captured
3,969

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding
malwarebytes.com
https://blackpointcyber.com/blog/novel-fake-captcha-chain-delivering-amatera-stealer/
blackpointcyber.com
https://potentpages.com/servers/hosting/security/the-mystery-worker-in-cloudflare
potentpages.com
https://censys.com/blog/etherhiding-fake-captchas-click-fix-lures-blockchain-backed-payload-delivery/
censys.com
https://www.joesandbox.com/analysis/1877685/0/html
joesandbox.com
https://www.vmray.com/feature-highlight-dll-hollowing/
vmray.com
https://blog.gdatasoftware.com/2026/02/38373-pivigames-spreads-hijackloader
blog.gdatasoftware.com
https://learn.microsoft.com/en-us/dotnet/core/deploying/native-aot/?tabs=windows%2Cnet8
learn.microsoft.com
https://bscscan.com/address/0x7CC3cFC1Ac007B8c6566fD2C7419b15a75473468
bscscan.com
https://www.vmray.com/threat-intelligence-insights-pivoting-off-the-blockchain/
vmray.com
https://github.com/hashicorp/yamux
github.com
https://www.proofpoint.com/us/blog/threat-insight/amatera-stealer-rebranded-acr-stealer-improved-evasion-sophistication
proofpoint.com
https://www.esentire.com/blog/unpacking-netsupport-rat-loaders-delivered-via-%20%20clickfix
esentire.com
https://www.sekoia.com/blog/meet-iclickfix-a-widespread-wordpress-targeting-f%20%20ramework-using-the-clickfix-tactic
sekoia.com
https://raw.githubusercontent.com/Cisco-Talos/IOCs/refs/heads/main/2026/09/clearfake-webdav-infection-chain.txt
raw.githubusercontent.com
Elsewhere on blog.talosintelligence.com (1)