Hackers Abuse FTP Banners to Deliver New Windows Malware E4del and PINHOLE
evilsocket · x · 2026-08-21
Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named E4del and PINHOLE. The attack starts with a ZIP archive triggering an LNK-based infection chain, using FTP banners as dead-drop resolvers (DDR) to retrieve commands. E4del is a Node.js-based RAT disguised as Discord. SOCRadar found the technique weaponized since early July 2026 and still active.
More from Safety
- ALIFE2026 Workshop Focuses on Agentic AI Safety — danbri · 2026-08-21
- OpenAI monitoring adds 20% inference overhead, reshaping agent economics — Crescitaly · 2026-08-21
- Auditing safety signals in Zero Data Retention without provider access — Crescitaly · 2026-08-21
- Stop parenting your AI: treating it as a collaborator improves output — incajb · 2026-08-21
- Critical Microsoft Copilot CoSnitch Vulnerability Exposes Data via Single Click — emmanuelvivier · 2026-08-21
- DeepMind and Partners Announce Up to $10M Funding Call for Multi-Agent AI Safety Research — weballergy · 2026-08-21