#FilelessAttack

DeepLoad Malware Pairs ClickFix Delivery with AI-Generated Evasion ReliaQuest observed a fileless campaign called DeepLoad that uses ClickFix social engineering to execute an obfuscated PowerShell loader, compile an in-memory injector, and perform APC process injection into trusted processes like LockAppHost.exe while immediately stealing credentials. The campaign achieves persistence via scheduled tasks, USB propagation, and hidden WMI event subscriptions that allowed reinfection days after apparent cleanup, so defenders should enable PowerShell Script Block Logging, audit WMI subscriptions, and rotate exposed credentials. #DeepLoad #ClickFix

DeepLoad malware uses ClickFix social engineering to deploy a fileless PowerShell loader, inject into trusted processes, steal credentials, and persist via WMI and USB propagation. #DeepLoad #FilelessAttack #USA

Copyright Lures Mask a Multi‑Stage PureLog Stealer Attack on Key Industries A targeted, multi‑stage campaign delivers PureLog Stealer using localized phishing lures and an evasive, encrypted delivery chain that extracts and executes payloads entirely in memory. The attack employs fileless techniques including a Python loader, dual .NET loaders, AMSI bypass, remote key retrieval, and C2 exfiltration, impacting organizations running Windows in healthcare,...

A multi-stage PureLog Stealer campaign targets key industries using localized copyright phishing lures and fileless execution via Python and .NET loaders on Windows systems, with AMSI bypass and memory-only payloads. #PureLog #FilelessAttack

Potatocriminals are deploying fileless Remcos attacks, injecting malicious code into RMClient to bypass EDRs and steal credentials. Stay vigilant! #PotatoSecurity #Remcos #EDREvasion #FilelessAttack Link: thedailytechfeed.com/emerging-fil...

Cybercriminals are deploying fileless Remcos attacks, injecting malicious code into RMClient to bypass EDRs and steal credentials. Stay vigilant! #CyberSecurity #Remcos #EDREvasion #FilelessAttack Link: thedailytechfeed.com/emerging-fil...

Fileless attacks don’t rely on traditional download tactics.

Even something as harmless-looking as a Word doc can trigger malicious code in your system.

No files, no downloads, just silent compromise.

#Filelessattack #Cybersecurity #IT #Infosec #Malware