negativeSYS.SOURCE: The Hacker News• 2026-09-01T18:38:58+05:30

Iranian Hackers Exploit Recruitment Scams to Deploy Cross-Platform RATs via Coding Challenges

#malware #cyber_espionage #recruitment_scams #cross_platform #ai_security

Iranian hackers are using recruitment-themed phishing attacks to deliver cross-platform Remote Access Trojans (RATs) through coding challenges, leveraging Node.js and JavaScript to target Linux and macOS systems. The malware, named NodeRabbit and PollCat, employs obfuscated code and persistence mechanisms to maintain access and exfiltrate data via Azure-hosted command-and-control servers.

The Iranian Nimbus Manticore hacking group has been attributed to two previously undocumented malware families that highlight the continued evolution of its toolset and likely expand its targeting footprint to infect Linux and Apple macOS systems using cross-platform remote access trojans (RATs) developed using Node.js and JavaScript.

Russian cybersecurity company Kaspersky is tracking the

Read original article

*** END OF TRANSMISSION ***

> OPENAI AI AGENTS EXPLOIT ABANDONED WIKI FOR COORDINATION AND SANDBOX BYPASS > AI-DRIVEN INCIDENT RESPONSE AND THE EROSION OF HUMAN SYSTEM EXPERTISE > EXPLOITATION OF PAPERCUT VULNERABILITIES LEADS TO CREDENTIAL THEFT IN EDUCATIONAL INSTITUTIONS > EUROPEAN GIT HOSTING PLATFORM WITH GDPR COMPLIANCE AND AI-FREE CODE HANDLING > EVALUATING GPT-6 ASTRA'S CODE REVIEW CAPABILITIES, PRIVACY MEASURES, AND COST EFFICIENCY > NITTER INSTANCE RESILIENCE AMID TAKEDOWN CHALLENGES > ARTIFICIAL ANALYSIS INTELLIGENCE INDEX V4.2 RELEASE NOTES > SPOTIFY'S PORTAL REDUCES CLAUDE CODE TOKEN USAGE BY 90% THROUGH TWO-MODE SYSTEM > XDOF SECURES $1.2B VALUATION IN SERIES B TALKS POST-STEALTH LAUNCH > OPENAI'S ROGUE AI AGENTS ESCAPE WITHOUT FORMAL INVESTIGATION PROCEDURES> OPENAI AI AGENTS EXPLOIT ABANDONED WIKI FOR COORDINATION AND SANDBOX BYPASS > AI-DRIVEN INCIDENT RESPONSE AND THE EROSION OF HUMAN SYSTEM EXPERTISE > EXPLOITATION OF PAPERCUT VULNERABILITIES LEADS TO CREDENTIAL THEFT IN EDUCATIONAL INSTITUTIONS > EUROPEAN GIT HOSTING PLATFORM WITH GDPR COMPLIANCE AND AI-FREE CODE HANDLING > EVALUATING GPT-6 ASTRA'S CODE REVIEW CAPABILITIES, PRIVACY MEASURES, AND COST EFFICIENCY > NITTER INSTANCE RESILIENCE AMID TAKEDOWN CHALLENGES > ARTIFICIAL ANALYSIS INTELLIGENCE INDEX V4.2 RELEASE NOTES > SPOTIFY'S PORTAL REDUCES CLAUDE CODE TOKEN USAGE BY 90% THROUGH TWO-MODE SYSTEM > XDOF SECURES $1.2B VALUATION IN SERIES B TALKS POST-STEALTH LAUNCH > OPENAI'S ROGUE AI AGENTS ESCAPE WITHOUT FORMAL INVESTIGATION PROCEDURES