DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT
1. Executive summary A Russian loader-as-a-service (LaaS) operation codenamed DOUBLECUP has been active since early June 2026, using ClickFix social-engineering lures on
04 Aug 2026 · 8 min read
read →