Threats Tagged 'sheetagent'
View all threats tagged with 'sheetagent'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'sheetagent'
Click on any threat for detailed analysis and mitigation recommendations
Operation ShadowRecruit: A Recruitment-Themed Malware Campaign Leveraging ControlR and Google Sheets to Target Indian Job Seekers 0 Operation ShadowRecruit is a medium-severity malware campaign targeting Indian government job seekers through fake recruitment ads. The attack uses a malicious ZIP archive containing a disguised LNK file, PowerShell script, and .NET executable. It abuses the legitimate ControlR remote management tool for persistence and deploys SheetAgent RAT, a custom .NET malware that uses Google Sheets as a command-and-control channel. The malware employs multiple persistence mechanisms such as scheduled tasks and startup folder entries and includes anti-virtualization checks to evade analysis. The campaign infrastructure includes multiple web-based management panels and shows links to APT36 based on targeting and tactics. MediumMalware Join the discussion British Indian Ocean Territory India#scheduled task persistence#controlr abuse#recruitment lure | AlienVault OTX General | 07/14/2026, 11:51:21 UTC Added: 07/14/2026, 16:18:14 UTC |
Showing 1 to 1 of 1 result