Security News Researchers Uncover Mining Operation Using ISO Lures to Spread RATs and Crypto Miners TheHackerNews Daniel Bender 02 Apr 2026 REF1695 spreads RATs and miners since Nov 2023 via ISO lures, earning 27.88 XMR across four wallets through cryptomining and CPA fraud.