Threats Tagged 'vbs deployment'
View all threats tagged with 'vbs deployment'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'vbs deployment'
Click on any threat for detailed analysis and mitigation recommendations
From E-Sign to RMM: DocuSign Kit Targets Windows and... 0 A phishing campaign impersonates DocuSign to trick victims into installing legitimate remote management software such as MeshAgent, ScreenConnect, and SimpleHelp. It uses a reusable web kit with staged delivery, user-agent filtering targeting Windows systems (excluding Edge browsers), and Cloudflare Turnstile verification. The campaign features separate delivery paths for Windows and macOS, disables Windows Defender via VBS scripts, and establishes persistence through service installation. Active from May to July 2026, it rotates infrastructure across multiple domains to evade detection while abusing trusted IT tools for persistent access. Join the discussion | AlienVault OTX General | 07/21/2026, 11:38:33 UTC Added: 07/21/2026, 22:37:35 UTC |
Showing 1 to 1 of 1 result