T1204.002

User Execution: Malicious File

discovered 2026-07-08

Victims build/run the fake scanner or lure-repo cheats/tools, triggering the loader chain.

View on MITRE ATT&CK

Seen in packages

Campaigns