Malware
Hyrax
- First Reported
- Mar 18, 2026
- Latest Reported
- Mar 18, 2026
Reported Context (1)
- A Hyrax information-stealer variant in the fake VPN campaign collected VPN sign-in credentials and sent them to attacker-controlled infrastructure. Fake VPN Installers Steal Credentials as Router Proxy Botnet Is Disrupted
Threat Actors (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.