MALICIOUS (1) campaign cataloged at 2026-04-23(2).

1. The campaign has clearly malicious intent, like infostealers.
2. This is just the date of creating the catalog entry. It may not reflect the date of creation of the campaign itself.

2026-04-Lyrox

Heavy obfuscate code for extracting further obfuscate binaries and executing them using file less techniques. Some versions contain the executable embedded, other require providing them externally.

Abuse categories

obfuscation

Code uses obfuscation techniques to hide its true purpose.

Packages in the campaign

campaign:2026-04-Lyrox

• lyrox