August 21, 2026
- INDIGO-SHARK is a multi-stage Brazilian operation chaining anonymous SMB shares, staged VBS loaders and Blogspot dead drops to a Chrome-based RAT with keylogging, screen streaming, shellcode injection and cryptojacking, with C2 spread across Blogspot tags, GitHub, Telegram, Google Analytics and Tor (MENSVR report). · Threat Activity