Rhadamanthys
According to PCrisk, Rhadamanthys is a stealer-type malware, and as its name implies - it is designed to extract data from infected machines.
At the time of writing, this malware is spread through malicious websites mirroring those of genuine software such as AnyDesk, Zoom, Notepad++, and others. Rhadamanthys is downloaded alongside the real program, thus diminishing immediate user suspicion. These sites were promoted through Google ads, which superseded the legitimate search results on the Google search engine.
Linked Threat Actors
Last 7 days
| Date | C2 Hosts |
|---|---|
| Mar 1, 2026 | 1 |
| Feb 28, 2026 | 1 |
Further Reading
Trend Research discusses the delivery methods, custom payloads, and techniques used by Water Gamayun, the suspected Russian threat actor abusing a zero-day vulnerability in the Microsoft Management...
Rhadamanthys is a malicious information stealer written in C++, which is being distributed mostly via malicious Google advertisements