Security News DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT TheHackerNews Daniel Bender 04 Aug 2026 Share DOUBLECUP hides malware stages in cached PNG files, then uses ClickFix commands to deliver CountLoader variants and the DeviceManager RAT in memory.
