rat

Varonis uncovered Dolphin X, a RAT with an AI behavioral profiler that scores infected victims by value. ZeroBEC exposed Forg365, a phishing-as-a-service platform with AI lure generation targeting Microsoft 365.

A malvertising campaign active July 21-22 used Bing ads and a malicious Claude artifact hosted on claude.ai itself to deliver SectopRAT to at least 29 organisations. The staging infrastructure exploited the corporate allow-listing of Anthropic's domain.

An attacker compromised a stale npm contributor account on June 17, 2026 and republished 144 packages in the @mastra scope with a malicious typosquatted dependency that installs a cryptocurrency-stealing RAT. Developers building AI applications with Mastra's 1.1 million weekly downloads should rotate all credentials immediately.