TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8352
@thehackernews
The Hacker News
Post content
Post content
Threat actors are delivering AsyncRAT via IPFS-hosted VHD files in DEAD#VAX. Phishing emails mount fake PDF drives that run obfuscated scripts and in-memory shellcode inside trusted Windows processes—minimal disk trace. 🧠 Fileless 🛰️ IPFS 🪟 Process injection 🔗Read → https://thehackernews.com/2026/02/deadvax-malware-campaign-deploys.html