July 5, 2026
- Cloudflare quietly killed the NWHStealer campaign. A researcher deobfuscating a BUN-bundled stealer (spread via fake GTA 6 ads) found its C2 (
unauth-amper[.]cc) already taken down by Cloudflare, ending the campaign. vx-underground · Threat Activity