VNVũ Nhật Lâminblog.fiscybersec.com·6h ago · 17 min readPhantom Deal: When the NDA Is the PayloadSummary It started with an innocuous WhatsApp message: "Hi David, I hope you are well. Are you at the office?" The sender claimed to be a real Gen executive based in Dublin. The profile used his nam00
VNVũ Nhật Lâminblog.fiscybersec.com·6h ago · 22 min readStreamRat: When the Delivery Channel Is Paid Advertising and the Landing Page Coaches Victims Past Their Own Security WarningsSummary On 2 September 2026, ThreatFabric published StreamRat — a new Android banking trojan distributed through Meta and TikTok advertisements impersonating a free TV streaming service, aimed at Span00
VNVũ Nhật Lâminblog.fiscybersec.com·6h ago · 19 min readTerminalFix: Change One Dialog Box, and the Payload Jumps From an Infostealer to a Tunnel Into the NetworkSummary Classic ClickFix directs victims to the Windows Run dialog. TerminalFix directs them to Windows Terminal or PowerShell. It sounds like a trivial detail. But the Run dialog accepts a single lin00
VNVũ Nhật Lâminblog.fiscybersec.com·6h ago · 21 min readZBT: Three Implants, One Supply Chain, and 392 Devices Calling a Forgotten DomainSummary VulnCheck bought an $88 router on Amazon from a small company in New York. The label said Deep Orange. Underneath the shell was a ZBT-WE826-T2 from Shenzhen Zhibotong Electronics, and inside t00
VNVũ Nhật Lâminblog.fiscybersec.com·23h ago · 23 min readPhantom Deal: khi NDA chính là payloadTóm tắt Nó bắt đầu bằng một tin nhắn WhatsApp vô hại: "Hi David, I hope you are well. Are you at the office?" Người gửi tự nhận là một lãnh đạo thật của Gen đặt tại Dublin. Hồ sơ dùng đúng tên, đúng00
