microsoft.net

Title/body text match only.

• New Abuse of the ClickOnce Technology, Part 1: The Inner Workings of ClickOnce Application Deployment

  New Abuse of the ClickOnce Technology, Part 1: The Inner Workings of ClickOnce Application Deployment New Abuse of the ClickOnce Technology: Part 1 | CrowdStrike Blog Featured New Abuse of the ClickOnce Technology, Part 2: Stop Threat Actors from Clicking Once and Staying Foreve

• CloudZ RAT potentially steals OTP messages using Pheno plugin

  CloudZ RAT potentially steals OTP messages using Pheno plugin Cisco Talos discovered an intrusion, active since at least January 2026, where an unknown attacker implanted a CloudZ remote access tool (RAT) and a previously undocumented plugin called “Pheno.” Cisco Talos dis

All reports →