The CloudZ Trojan steals data through Microsoft Phone Link. The campaign has been active since at least January 2026.  Follow ...
A previously undocumented .NET trojan and its companion Pheno plugin allow attackers to capture mobile authentication codes ...
A new version of the CloudZ remote access tool (RAT) is deploying a previously unseen malicious plugin called Pheno that ...
CloudZ RAT exploits Phone Link since Jan 2026, stealing credentials and OTPs via Pheno plugin, bypassing 2FA protections.
Lauren (Hansen) Holznienkemper is a lead editor for the small business vertical at Forbes Advisor, specializing in HR, payroll and recruiting solutions for small businesses. Using research and writing ...