DOUBLECUP Loader-as-a-Service Uses ClickFix to Hide Malware
August 03, 2026
1 min read
5 views
cybersecurity
malware
news
The DOUBLECUP service uses ClickFix attacks to trick users into running commands that extract malicious payloads hidden in browser-cached PNG images. It delivers the CountLoader malware and a new DeviceManager RAT to Windows and macOS systems.
Was this article helpful?
0 found this helpful