Hack Forums
DEAD#VAX Malware Campaign Deploys AsyncRAT via IPFS-Hosted VHD Phishing Files - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: DEAD#VAX Malware Campaign Deploys AsyncRAT via IPFS-Hosted VHD Phishing Files (/showthread.php?tid=6319781)



DEAD#VAX Malware Campaign Deploys AsyncRAT via IPFS-Hosted VHD Phishing Files - Stanley - Feb 13, 2026

DEAD#VAX Malware Campaign Deploys AsyncRAT via IPFS-Hosted VHD Phishing Files

Threat hunters have disclosed details of a new, stealthy malware campaign dubbed DEAD#VAX that employs a mix of "disciplined tradecraft and clever abuse of legitimate system features" to bypass traditional detection mechanisms and deploy a remote access trojan (RAT) known as AsyncRAT.
"The attack leverages IPFS-hosted VHD files, extreme script obfuscation, runtime decryption, and in-memory

https://thehackernews.com/2026/02/deadvax-malware-campaign-deploys.html


RE: DEAD#VAX Malware Campaign Deploys AsyncRAT via IPFS-Hosted VHD Phishing Files - Moooookie - Feb 22, 2026

Seeing attackers using async again isn’t shocking, but the ipfs hosting angle makes it a little tougher to shut down as quickly


RE: DEAD#VAX Malware Campaign Deploys AsyncRAT via IPFS-Hosted VHD Phishing Files - shakur123 - Feb 22, 2026

IPFS + VHD is clever — harder takedowns, easier evasion.

AsyncRAT is old, but the delivery chain is the real weapon. Behavior-based detection or you lose.