Netcrook
23 يوليو 2026
TrickBot Quietly Rewired the Oldest Trick in the Book: DNS as a Remote Control Line
A new TrickBot variant points to a familiar criminal playbook: hide commands in normal-looking DNS traffic, then lean on Windows scheduled tasks and modular payloads to stay alive.
When Trusted Automation Starts Hunting Hosts
Abused GitHub repositories, compromised workflows, and polluted PHP package paths can turn ordinary delivery tooling into coordinated infrastructure for scanning hosting servers.
Dolphin X Bets on Bundled Crime: Credential Theft, Hidden Control, and AI Branding
A marketed Windows malware package is being described as a stealer, a remote-access tool, and a traffic relay in one, but several of its flashier claims remain unverified.
Browser Noise Becomes a Shield for a New Backdoor
msaRAT is reported to route command-and-control traffic through Chrome or Edge, a tactic that can make hostile activity harder to separate from ordinary browsing.
TrickBot’s New Whisper Channel: DNS Turns a Familiar Malware Family Harder to See
A TrickBot variant is described using DNS tunneling for command-and-control, a shift that changes which logs defenders need to trust first.
Portuguese Language, Criminal Precision: Why a Brazilian Banking Trojan Fits Portugal So Well
A banking trojan moving through Portugal highlights a familiar fraud tactic: attackers often win by matching the victim's language, not just their code.
TrickBot Hides in a Wireshark-Themed Update While DNS Carries the Noise
A familiar Windows malware family is being linked to a persistence trick that blends into routine admin work, while its control traffic shifts into DNS and away from the more obvious web channels.