STX RAT

Reported Context (5)

High-profile incidents include the Vercel breach tied to Context.ai and campaigns delivering PHANTOMPULSE, STX RAT, Lumma Stealer, and widespread malicious Chrome extensions. Weekly Cybersecurity Recap Covers Vercel Breach, Malware Campaigns and QEMU Abuse
Hackers hijacked CPUID downloads, served STX RAT to victims Week in review: Acrobat Reader zero-day, AI agent risks and security developments
The ultimate goal is to distribute a recently discovered Windows malware tracked as STX RAT, which enables attackers to take control of the compromised machine and steal information such as browser credentials, CPUID Website Compromise Served Trojanized Hardware-Utility Downloads
The attack used a malicious CRYPTBASE.dll for DLL sideâloading and antiâsandbox evasion to deploy STX RAT, affecting over 150 victims across multiple countries and industries. CPUID Website Compromise Used Trojanized CPU-Z and HWMonitor Downloads to Spread STX RAT
STX RAT is a newly identified remote access trojan observed in late February 2026 that uses opportunistic initial access (e.g., browser-downloaded VBScript and trojanized FileZilla installers), a custom multi-stage eSentire Details STX RAT’s Encrypted C2, Evasion and Credential-Theft Capabilities

CVE (4)

Malware (14)

People (2)

Threat Actors (9)

MITRE ATT&CK (22)

Vendors (10)

Products (28)

Tools (7)

Industries (14)

Countries (17)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.