Russian national indicted for phishing 80,000 freelancers with TVRAT/DarkVNC

Wed, 02 Sep 2026 15:05:08 +0000

Engineer — Skip
SOC/IR — Learn: TVRAT and DarkVNC are remote access trojans worth reviewing in your detection library; no new IOCs or active campaign signals in this item, but the freelancer-targeting lure pattern is worth noting for awareness.
Leader — Learn: A useful data point on scale of freelancer-targeting campaigns (80,000 victims) for risk discussions around contractor onboarding and device trust policies.

Indictment on CuraSec