home.social

#amadey — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #amadey, aggregated by home.social.

  1. VectraRAT: An Undocumented Full-Stack MaaS Built From Scratch

    VectraRAT is a previously undocumented Malware-as-a-Service platform combining a Go-based control server (VectraHub) with a native C++ Windows implant, renting from $250 monthly. The developer, operating under the handle 'Vectra' (formerly 'Nyxel'), has been active since August 2022 without prior public documentation. The platform offers hidden desktop control, keylogging, clipboard hijacking with cryptocurrency address replacement, browser credential theft, and a UAC bypass achieving elevation without user prompts. Delivered through Amadey loader and ClickFix campaigns targeting tax-themed lures, 48% of observed victims run corporate Windows editions including Windows Server 2025. Infrastructure analysis revealed exposed directories and operational panels across multiple hosting providers, with victims spanning the United States, Russia, Germany, and other nations.

    Pulse ID: 6aaacbc43d4293c72220717b
    Pulse Link: otx.alienvault.com/pulse/6aaac
    Pulse Author: AlienVault
    Created: 2026-09-16 17:03:00

    Be advised, this data is unverified and should be considered preliminary. Always do further verification.

    #MaaS #Amadey #Clipboard #cryptocurrency #OTX #AlienVault