tech π» New Malware Blends Social Engineering with Defense Evasion
A new malware-as-a-service campaign combines social engineering with defense evasion tactics. eSentireβs Threat Response Unit observed this sophisticated operation in late July 2026. The attack starts via compromised WordPress sites using ErrTraffic JavaScript linked to the Ethereum blockchain. Victims are tricked into running a malicious PowerShell command, sideloading the Cruciferra DLL. This loader disables 145 security processes using a vulnerable driver, injecting the Remus information stealer. π»