> TritonInfoSec News
Home / Aug 04, 2026 / Story
0
#9 BleepingComputer general August 03, 2026 at 20:01 UTC

New DOUBLECUP ClickFix service hides malware in browser cache images

By Lawrence Abrams

AI Summary

A new Russian loader-as-a-service named DOUBLECUP uses ClickFix lures to hide malicious code inside PNG images cached in victims' browsers, ultimately delivering CountLoader on both Windows and macOS and a new Windows-specific RAT called DeviceManager. The cross-platform delivery capability and use of browser cache as a steganographic staging mechanism represent a notable evasion technique that may bypass traditional file-based detection. Security teams should review browser cache monitoring and ClickFix-style social engineering defenses.

Read full article → https://www.bleepingcomputer.com/news/security/new…

Relevance score: 76.0/100

# More from August 04

  1. 1
    Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts The Hacker News
  2. 2
    INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws The Hacker News
  3. 3
    N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete The Hacker News
  4. 4
    The OpenAI Hack Shows the Genie Is Out of the Bottle Schneier on Security
  5. 5
    Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts BleepingComputer
  6. 6
    Bitcoin hardware wallet maker destroys some inventory after more than $88 million stolen The Record
  7. 7
    Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS The Hacker News
  8. 8
    ExfilSquad hackers leak info of over 100,000 UK police officers, staff BleepingComputer
  9. 10
    Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable The Hacker News