securityBACKGROUND
DOUBLECUP's PNG Payload, (Mon, Aug 24th)
BACKGROUND
1 SIGNALFIRST DETECTED 24 August 2026
Narrative synthesis pending — 1 signal collected.
How the story developed
24 Aug
DOUBLECUP's PNG Payload, (Mon, Aug 24th)
REPORT · WHAT · SANS Internet Storm Center
Other feeds and industry voices
3 Aug
New DOUBLECUP ClickFix service hides malware in browser cache images
A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by victims' browsers, ultimately delivering CountLoader to
REPORT · WHAT · BleepingComputerOPEN STORY
4 Aug
DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT
A new Russian loader-as-a-service (LaaS) codenamed DOUBLECUP has been using ClickFix lures as a way to stage malware-laced PNG images in victims' browser cache and ultimately
REPORT · HOW · The Hacker NewsOPEN STORY
Sources
SANS Internet Storm Center
NewsHive monitors these sources continuously. All signal titles above link to the original reporting.
Intelligence by NewsHive. Need help navigating what this means for your business? Contact GeekyBee →