TGTGInsighttelegram intelligenceLIVE / telegram public index
TGINSIGHT POST
Post #8454
@thehackernews
The Hacker News
Post content
Post content
MIMICRAT, a new RAT, is spreading via compromised legitimate sites. Hijacked services displayed fake Cloudflare checks, pushing a PowerShell command that disables logging and AV, then connects over HTTPS masked as analytics traffic. 🔗 Loader stages and 22-command toolkit → https://thehackernews.com/2026/02/clickfix-campaign-abuses-compromised.html