Back to Feed
MalwareMar 19, 2026

The Flow: A fake "Verify You Are Human" prompt leads to Node.js C2 (interlock RAT), followed by h...

A social engineering campaign uses fake CAPTCHA prompts to distribute Interlock RAT, a Node.js-based command-and-control malware. After establishing C2 communication, attackers perform hands-on-keyboard activity using Volatility tools to dump credentials from memory.

Summary

A social engineering campaign uses fake CAPTCHA prompts to distribute Interlock RAT, a Node.js-based command-and-control malware. After establishing C2 communication, attackers perform hands-on-keyboard activity using Volatility tools to dump credentials from memory.

Indicators of Compromise

  • malware — Interlock RAT
  • malware — vol.exe