New Malware Campaign Uses Cloudflare Tunnels to Deliver RATs via Phishing Chains
A new campaign is making use of Cloudflare Tunnel subdomains to
host malicious payloads and deliver them via malicious attachments
embedded in phishing emails. The ongoing campaign has been
codenamed SERPENTINE#CLOUD by Securonix. It leverages "the
Cloudflare Tunnel infrastructure and Python-based loaders to
deliver memory-injected payloads through a chain of shortcut files
and obfuscated
Read more https://thehackernews.com/2025/06/new-malware-campaign-uses-cloudflare.html