This notice details a cybersecurity incident that occurred on September 30, 2026, involving the "SmartApeSG ClickFix" malware which is being used to distribute the "CNCmachineRMS RAT". The alert highlights crucial information for analysis, including a new password scheme for associated zip files, with the password located on the website's "about" page.
A key piece of intelligence provided is the Command and Control (C2) server IP address for the CNCmachineRMS RAT, identified as 195.63.128.106. Several associated files are made available for further investigation, including zip archives containing notes, HTTPS traffic captures, a full packet capture (pcap), and the CNCmachineRMS RAT files themselves, all intended to aid in understanding and mitigating the threat.
Top comments (0)