[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbM4a3CYN9WX5RewnP8D6eYxgPbMzXhuTpWR0KZh0cWc":3},{"article":4,"iocs":38},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":21,"category":22,"article_tags":25},"3067496d-481b-4db3-9312-b903a422c7d0","1\u002F2⚠️ A commodity remote access trojan called Scorpio hVNC is being sold as a subscription servic...","1-2-a-commodity-remote-access-trojan-called-scorpio-hvnc-is-being-sold-as-a-subs-f76671","1\u002F2⚠️ A commodity remote access trojan called Scorpio hVNC is being sold as a subscription service, marketed as a hidden VNC remote desktop tool with credential theft, crypto wallet stealing, and live keylogging built in.\n⠀\n‣ Threat Actor: TR\u002FDropper.Gen5\n‣ Category: https:\u002F\u002Ft.co\u002FIA8XNYQxVJ","Scorpio hVNC, a commodity remote access trojan (RAT), is being actively marketed and sold as a subscription-based service. The malware includes built-in capabilities for credential theft, cryptocurrency wallet stealing, and live keylogging. The threat actor behind its distribution is tracked as TR\u002FDropper.Gen5.","Scorpio hVNC remote access trojan sold as subscription service with credential theft and crypto stealing.",null,"https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2049886016761434527","https:\u002F\u002Fpbs.twimg.com\u002Famplify_video_thumb\u002F2049885939896373249\u002Fimg\u002FGLRN3tYrUaH1daJC.jpg","2026-04-30T16:18:06+00:00","2026-04-30T17:00:09.779757+00:00",8,[18],{"name":19,"type":20},"TR\u002FDropper.Gen5","threat_actor","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":21,"icon":11,"name":23,"slug":24},"Malware","malware",[26,31,33],{"category":27},{"id":28,"icon":11,"name":29,"slug":30},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":32},{"id":21,"icon":11,"name":23,"slug":24},{"category":34},{"id":35,"icon":11,"name":36,"slug":37},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[39,42],{"type":24,"value":40,"context":41},"Scorpio hVNC","Remote access trojan sold as subscription service with credential theft and crypto wallet stealing",{"type":24,"value":19,"context":43},"Threat actor distributing Scorpio hVNC"]