Cybercriminals Use Fake AI Guides and Dev Tools to Spread AsyncRAT Malware

Multiple active campaigns and vulnerabilities reported: threat actors are distributing AsyncRAT via fake AI guides and malicious developer tools (with indicators of AI-assisted coding), while other campaigns push Vidar stealer via fake software videos and SilabRAT trojan for session/crypto theft. Law enforcement dismantled the SniperDz phishing-as-a-service platform. Research warns of new “agentjacking” attacks that can hijack AI coding agents. Vulnerability activity is high — Microsoft fixed ~200 CVEs (including three zero-days), Google patched Chrome CVE-2026-11645 (in-the-wild exploit), and