Cybersecurity firm VMware Carbon Black has identified 15 new infections where NetSupport RAT, a remote access trojan, was utilized by threat actors in phishing campaigns aimed at the education, government and business sectors. Typically downloaded via deceptive websites or fake browser updates, the trojan allows malicious actors to manipulate computer settings, transfer files, and monitor behavior on the device.

“PupkinStealer” A New .NET-Based Malware Steals Browser Credentials & Exfiltrate via Telegram
PupkinStealer is a C# malware that steals sensitive data, including browser credentials and desktop files, using Telegram for stealthy data exfiltration. Discovered in April 2025,