{"id":4519,"date":"2025-06-03T16:12:00","date_gmt":"2025-06-03T16:12:00","guid":{"rendered":"https:\/\/news.cybertechworld.co.in\/index.php\/2025\/06\/03\/fake-docusign-gitcode-sites-spread-netsupport-rat-via-multi-stage-powershell-attack\/"},"modified":"2025-06-03T16:12:00","modified_gmt":"2025-06-03T16:12:00","slug":"fake-docusign-gitcode-sites-spread-netsupport-rat-via-multi-stage-powershell-attack","status":"publish","type":"post","link":"https:\/\/news.cybertechworld.co.in\/index.php\/2025\/06\/03\/fake-docusign-gitcode-sites-spread-netsupport-rat-via-multi-stage-powershell-attack\/","title":{"rendered":"Fake DocuSign, Gitcode Sites Spread NetSupport RAT via Multi-Stage PowerShell Attack"},"content":{"rendered":"<p>\u200bThreat hunters are alerting to a new campaign that employs deceptive websites to trick unsuspecting users into executing malicious PowerShell scripts on their machines and infect them with the NetSupport RAT malware.<br \/>\nThe DomainTools Investigations (DTI) team said it identified &#8220;malicious multi-stage downloader Powershell scripts&#8221; hosted on lure websites that masquerade as Gitcode and DocuSign.<br \/>\n&#8221;\u00a0Threat hunters are alerting to a new campaign that employs deceptive websites to trick unsuspecting users into executing malicious PowerShell scripts on their machines and infect them with the NetSupport RAT malware.<br \/>\nThe DomainTools Investigations (DTI) team said it identified &#8220;malicious multi-stage downloader Powershell scripts&#8221; hosted on lure websites that masquerade as Gitcode and DocuSign.<br \/>\n&#8221;\u00a0\u00a0The Hacker News<\/p>","protected":false},"excerpt":{"rendered":"<p>\u200bThreat hunters are alerting to a new campaign that employs deceptive websites to trick unsuspecting users into executing malicious PowerShell scripts on their machines and infect them with the NetSupport RAT malware. The DomainTools Investigations (DTI) team said it identified &#8220;malicious multi-stage downloader Powershell scripts&#8221; hosted on lure websites that masquerade as Gitcode and DocuSign.&hellip;&nbsp;<a href=\"https:\/\/news.cybertechworld.co.in\/index.php\/2025\/06\/03\/fake-docusign-gitcode-sites-spread-netsupport-rat-via-multi-stage-powershell-attack\/\" class=\"\" rel=\"bookmark\">Read More &raquo;<span class=\"screen-reader-text\">Fake DocuSign, Gitcode Sites Spread NetSupport RAT via Multi-Stage PowerShell Attack<\/span><\/a><\/p>\n","protected":false},"author":0,"featured_media":4520,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"neve_meta_sidebar":"","neve_meta_container":"","neve_meta_enable_content_width":"","neve_meta_content_width":0,"neve_meta_title_alignment":"","neve_meta_author_avatar":"","neve_post_elements_order":"","neve_meta_disable_header":"","neve_meta_disable_footer":"","neve_meta_disable_title":"","_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/posts\/4519"}],"collection":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/comments?post=4519"}],"version-history":[{"count":0,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/posts\/4519\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/media\/4520"}],"wp:attachment":[{"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/media?parent=4519"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/categories?post=4519"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news.cybertechworld.co.in\/index.php\/wp-json\/wp\/v2\/tags?post=4519"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}