RussianPanda 🐼 🇺🇦 on Twitter: "I am naming this #RogueRaticate campaign that leverages URL shortcuts to drop #NetSupportRAT 🐀 1/ ➡️ The user is getting infected via a drive-by download with the fake update screen (similar to SocGholish behavior). The initial payload is hosted on compromised WordPress… https://t.co/8KIiGuxo6w" / X
https://twitter.com/AnFam17/status/1671789322259800064?s=20