[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foNU-GXBQFTpWztOBzO_5JwnyKsB9DSUdl38HRbTjeRs":3},{"article":4,"iocs":46},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":26,"category":27,"article_tags":30},"49dd6e0c-a5c9-4ed2-90b1-ff0cfcd6de74","Users attempting to download open-source C++ IDE are hijacked via malicious CloudFront JS on-clic...","users-attempting-to-download-open-source-c-ide-are-hijacked-via-malicious-cloudf-3badc4","Users attempting to download open-source C++ IDE are hijacked via malicious CloudFront JS on-click, redirecting to fake MEGA-Transfer pages delivering #RemusStealer. Details at https:\u002F\u002Ft.co\u002FB9QBHn2xz0 https:\u002F\u002Ft.co\u002F67Q8qag6ot","Users attempting to download an open-source C++ IDE are being hijacked via a malicious CloudFront JS on-click event. This redirects them to fake MEGA-Transfer pages which deliver the RemusStealer malware.","Users downloading a C++ IDE are hijacked and redirected to fake MEGA pages delivering RemusStealer.",null,"https:\u002F\u002Fx.com\u002FUnit42_Intel\u002Fstatus\u002F2057916503844933836","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHI8wFEdXUAAIEnY.jpg","2026-05-22T20:08:23+00:00","2026-05-22T21:00:13.500134+00:00",9,[18,21,24],{"name":19,"type":20},"C++ IDE","product",{"name":22,"type":23},"CloudFront","technology",{"name":25,"type":20},"MEGA-Transfer","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":26,"icon":11,"name":28,"slug":29},"Malware","malware",[31,36,41],{"category":32},{"id":33,"icon":11,"name":34,"slug":35},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":37},{"id":38,"icon":11,"name":39,"slug":40},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":42},{"id":43,"icon":11,"name":44,"slug":45},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[47],{"type":29,"value":48,"context":49},"RemusStealer","Delivered via fake MEGA-Transfer pages"]