Cloudflare
AsyncRAT and the Misuse of Cloudflare Free-Tier Infrastructure: Detection and Analysis
Cybersecurity researchers have uncovered a sophisticated AsyncRAT campaign exploiting Cloudflare's free-tier services and TryCloudflare tunneling domains to evade detection while delivering remote access trojan...
Cloudflare
PhantomCaptcha RAT Uses Weaponized PDFs and “ClickFix” Cloudflare CAPTCHA Pages to Deliver Malware
A sophisticated spearphishing campaign has targeted humanitarian organizations working on Ukrainian war relief efforts, employing weaponized PDFs and fake Cloudflare captcha pages to deploy...
Cloudflare
MuddyWater Deploys Custom Multi-Stage Malware Hidden Behind Cloudflare
Since early 2025, cybersecurity analysts have witnessed a marked evolution in the tactics and tooling of MuddyWater, the Iranian state-sponsored Advanced Persistent Threat (APT)...
Cloudflare
Google Cloud & Cloudflare Missed 3-Year Phishing Campaign
An industrial-scale phishing campaign exploiting Google Cloud and Cloudflare infrastructure operated in plain sight for more than three years, targeting Fortune 500 companies and...
Cloudflare
Open Next SSRF Flaw in Cloudflare Lets Hackers Fetch Data from Any Host
A critical Server-Side Request Forgery (SSRF) vulnerability has been discovered in the @opennextjs/cloudflare package, posing a significant security threat to websites deployed using the...
Cloudflare
Cloudflare Shifts to HTTPS-Only for APIs, Closing All HTTP Ports
Cloudflare has announced that it will shift its APIs to HTTPS-only connections, effectively closing all HTTP ports.
This strategic decision aims to protect sensitive data...
Cloudflare
AsyncRAT Abusing Python and TryCloudflare For Stealthy Malware Delivery
In a significant finding, Forcepoint's X-Labs research team has uncovered a new malware campaign that uses AsyncRAT, a notorious remote access trojan (RAT), along...